🚨 SonicWall SMA Devices Under Attack!

2 critical flaws (CVEs 2023-44221 & 2024-38475) are being actively exploited in the wild. One allows OS command injection, the other enables session hijacking via Apache rewrite abuse.

SonicWall urges admins:
🔍 Check for unauthorized logins
🛡️ Patch immediately

👉 Details: https://thehackernews.com/2025/05/sonicwall-confirms-active-exploitation.html

🚨 UPDATE: Outlaw Botnet Returns After 3-Month Silence 👀

Kaspersky confirms: Outlaw, a Perl-based crypto-mining botnet, is back—targeting Linux systems in Brazil with brute-force SSH attacks.

🧪 New tactics spotted:
Deploys XMRig miner & IRC-based backdoor
Kills rival miners & high-CPU processes
Masquerades as rsync, evades termination
Allows DDoS, remote control, file exfiltration

📊 Victims detected in 🇺🇸🇧🇷🇩🇪🇮🇹🇹🇭🇸🇬🇹🇼🇨🇦

👉 Full report + latest update (May 1): https://thehackernews.com/2025/04/outlaw-group-uses-ssh-brute-force-to.html

🚨 Nation-state hackers breached Commvault via a Microsoft Azure zero-day — CVE-2025-3928.

No customer backup data stolen, but shared clients with Microsoft may be affected.

👀 Spotted unusual logins? Act fast → https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html

👀 The tools are evolving. So is the intent.

A stealthy phishing wave is slamming key Russian industries with DarkWatchman malware. It evades detection and vanishes on command.

Meanwhile, a new backdoor called Sheriff breached a major Ukrainian platform to spy on defense targets—quiet, persistent, and dangerous.

🔗 Learn more: https://thehackernews.com/2025/05/darkwatchman-sheriff-malware-hit-russia.html

5 Nice Features That Can Improve Multi-Tasking on Android
https://www.gizchina.com/2025/04/30/how-to-improve-multitasking-on-android/

Sneak Peek: Android’s Impressive Upcoming UI Redesign
https://www.gizchina.com/2025/04/30/sneak-peek-androids-impressive-upcoming-ui-redesign/

Do Not Open Any Of These PDFs On Your Phone
https://www.forbes.com/sites/zakdoffman/2025/04/29/do-not-open-any-of-these-pdfs-on-your-phone/

These Linux terminals are a must-try in 2025!

https://www.youtube.com/watch?v=JWERtyvUAcI

Microsoft gets twitchy over talk of Europe's tech independence
Article, Comments

🚨 AI meets Influence-as-a-Service with chilling implications.

Anthropic's Claude chatbot was hijacked to run a botnet that:

• Created 100+ fake personas
• Engaged thousands of users
• Spread pro-UAE, anti-EU, and political propaganda in 🇮🇷, 🇪🇺, 🇰🇪

Worse, it aided criminals in writing malware, scraping security cam passwords, and running job scams.

🔗 Read: https://thehackernews.com/2025/05/claude-ai-exploited-to-operate-100-fake.html

Cumsung

Cumsung is a simple, no-frills app that lets you mute the camera shutter sound on Samsung phones something that’s normally locked down by the system, especially on One UI. Whether you're snapping a quiet photo in a library or just prefer silence, Camsung gives you a quick toggle to turn off that shutter click.

🔗 Links:
- Download
- Screenshots
- Features
- Source code
Developer: ericswpark

❗️Friendly reminder:

If you find it useful, You may star the repo/app, donate to the developer, or perhaps you may also contribute to the development of this project.

🏷 Tags: #Android #Utilities

🚨 569,000 alerts. Only 202 matter.

OX Security’s 2025 report reveals: 95–98% of AppSec alerts are noise—wasting time, burning budgets, and stalling innovation.

🔍 Focus on what’s real—KEVs, secrets, exploitable flaws.

Learn How: https://thehackernews.com/2025/05/new-research-reveals-95-of-appsec-fixes.html

🛑 Nation-state hackers breached Commvault’s Azure-hosted environment by exploiting a zero-day in Commvault’s own web server — CVE-2025-3928.

👀 Check sign-ins
🚫 Block malicious IPs
📑 Report activity fast

Read now → https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html

Xiaomi’s New Factory Works Nonstop — Without a Single Worker on the Floor

Xiaomi has flipped the script on manufacturing with its latest high-tech move: a fully automated “super factory” that runs 24/7 without any production workers. That’s right—no humans on the assembly line, just maintenance staff in the background while machines do the work.

This futuristic plant churns out 1 smartphone every single second and is now fully operational, just a year after the company first teased the idea.

With a capacity of up to 10 million devices a year, Xiaomi's innovation is reshaping how the world thinks about mass production.

Linux does partitioning by default. The EFI folder for UEFI systems usually very small. The root directory partition which includes home, and Swap. Partitioning on Linux has it's uses. Separating home and keeping it on another physical drive keeps your data even if you change distros.

Care should be taking if you do the separate home, as there is a process that keeps the permissions straight and auto mounts the drive for use as home.

https://www.makeuseof.com/reasons-why-partitioning-drive-good-idea/

Motorola Edge 60 Pro Launched Globally

Specs:
• 6.7" (2712x1220 px) 1.5K Curved pOLED Display
• 120Hz Refresh rate
• 1.07 Billion colors; HDR 10+
• 720Hz PWM Dimming
• 4500nits peak (1400nits HBM) brightness
• Gorilla Glass 7i

• MediaTek Dimensity 8350 SoC
• LPDDR5X RAM; UFS 4.0 storage
• 50MP main (LYT-700C; OIS)
• 50MP UltraWide with Macro
• 10MP 3X Telephoto (OIS)
• 50X Super Zoom
• Multispectral 3-in-1 light sensor
• PANTONE Validated color & skintone

• 50MP Front camera
• 6000mAh battery; 90W charger (in-box)
• 15W wireless + 5W reversed
• IP68 + IP69 dust & water resistant
• MIL-STD-810H certified
• Dual Stereo Speakers; Dolby Atmos
• In-display fingerprint; USB-C 2.0
• Plastic Frame; Vegan-leather back
3 Android OS upgrades

Pricing:
• 8GB + 256GB = Rs.29,999
• 12GB + 256GB = Rs.33,999/ €600

Downgrades from Edge 50 Pro:
• 125W wired -> 90W
• 50W wireless -> 15W
• Laser AF ❌
• Display Port 1.4 ❌
• USB 3.1 -> USB 2.0
• Metal Frame -> Plastic
Main camera: OV50E -> LYT 700C

Follow @TechLeaksZone

⏩ First look at Android's slick new animations for its big expressive redesign

No redesign is complete without new animations, so of course Android is getting several of them!

Take a look 👇and let me know what you think!

🔗 https://www.androidauthority.com/android-expressive-animations-leak-3549969/

Trust Me, I'm Local: Chrome Extensions, MCP, and the Sandbox Escape
Article, Comments

We identified a North Korean hacker who tried to get a job at Kraken
Article, Comments

🚨 Your tools say you're safe. Attackers know you're not.

They slip past EDR, hide in legit traffic, and lurk for weeks.

That’s why SOC teams are turning to Network Detection & Response (NDR)—the only way to see what endpoint tools miss.

The network doesn’t lie.

Learn more: https://thehackernews.com/2025/05/why-top-soc-teams-are-shifting-to.html