🛑 Nation-state hackers breached Commvault’s Azure-hosted environment by exploiting a zero-day in Commvault’s own web server — CVE-2025-3928.

👀 Check sign-ins
🚫 Block malicious IPs
📑 Report activity fast

Read now → https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html

Xiaomi’s New Factory Works Nonstop — Without a Single Worker on the Floor

Xiaomi has flipped the script on manufacturing with its latest high-tech move: a fully automated “super factory” that runs 24/7 without any production workers. That’s right—no humans on the assembly line, just maintenance staff in the background while machines do the work.

This futuristic plant churns out 1 smartphone every single second and is now fully operational, just a year after the company first teased the idea.

With a capacity of up to 10 million devices a year, Xiaomi's innovation is reshaping how the world thinks about mass production.

Linux does partitioning by default. The EFI folder for UEFI systems usually very small. The root directory partition which includes home, and Swap. Partitioning on Linux has it's uses. Separating home and keeping it on another physical drive keeps your data even if you change distros.

Care should be taking if you do the separate home, as there is a process that keeps the permissions straight and auto mounts the drive for use as home.

https://www.makeuseof.com/reasons-why-partitioning-drive-good-idea/

Motorola Edge 60 Pro Launched Globally

Specs:
• 6.7" (2712x1220 px) 1.5K Curved pOLED Display
• 120Hz Refresh rate
• 1.07 Billion colors; HDR 10+
• 720Hz PWM Dimming
• 4500nits peak (1400nits HBM) brightness
• Gorilla Glass 7i

• MediaTek Dimensity 8350 SoC
• LPDDR5X RAM; UFS 4.0 storage
• 50MP main (LYT-700C; OIS)
• 50MP UltraWide with Macro
• 10MP 3X Telephoto (OIS)
• 50X Super Zoom
• Multispectral 3-in-1 light sensor
• PANTONE Validated color & skintone

• 50MP Front camera
• 6000mAh battery; 90W charger (in-box)
• 15W wireless + 5W reversed
• IP68 + IP69 dust & water resistant
• MIL-STD-810H certified
• Dual Stereo Speakers; Dolby Atmos
• In-display fingerprint; USB-C 2.0
• Plastic Frame; Vegan-leather back
3 Android OS upgrades

Pricing:
• 8GB + 256GB = Rs.29,999
• 12GB + 256GB = Rs.33,999/ €600

Downgrades from Edge 50 Pro:
• 125W wired -> 90W
• 50W wireless -> 15W
• Laser AF ❌
• Display Port 1.4 ❌
• USB 3.1 -> USB 2.0
• Metal Frame -> Plastic
Main camera: OV50E -> LYT 700C

Follow @TechLeaksZone

⏩ First look at Android's slick new animations for its big expressive redesign

No redesign is complete without new animations, so of course Android is getting several of them!

Take a look 👇and let me know what you think!

🔗 https://www.androidauthority.com/android-expressive-animations-leak-3549969/

Trust Me, I'm Local: Chrome Extensions, MCP, and the Sandbox Escape
Article, Comments

We identified a North Korean hacker who tried to get a job at Kraken
Article, Comments

🚨 Your tools say you're safe. Attackers know you're not.

They slip past EDR, hide in legit traffic, and lurk for weeks.

That’s why SOC teams are turning to Network Detection & Response (NDR)—the only way to see what endpoint tools miss.

The network doesn’t lie.

Learn more: https://thehackernews.com/2025/05/why-top-soc-teams-are-shifting-to.html

🛑 Hackers are disguising malware as security plugins to hijack sites, inject spammy ads, steal credit cards, & even re-install themselves if deleted.

Some victims are unknowingly losing their own AdSense earnings.

💣 Features: Remote code execution, reverse proxy skimming, JS-based backdoors.

🔗 Read: https://thehackernews.com/2025/05/fake-security-plugin-on-wordpress.html

4 open source camera apps

Latest IronFox for Android update
Updated to Firefox 138.0.
Updated to Phoenix 2025.04.27.1. - (See changes from the last IronFox release)

Added a toggle under Privacy and security in settings to control Safe Browsing. Note that this requires a restart to take effect.

Added toggles under Privacy and security -> Site settings to control JavaScript, JIT, and WebAssembly. (Note that the JIT toggle requires a restart to take effect). Due to the addition of these toggles, we've now enabled WebAssembly by default (due to the notable breakage it causes), though users are recommended to disable it if possible to improve security. JIT will remain disabled by default.

Neutered the mozAddonManager API to restrict its capabilities and limit the data shared with Mozilla, while still allowing users to install extensions from addons.mozilla.org.

We now harden FPP (Fingerprinting Protection) and set our overrides to unbreak websites internally, instead of using the privacy.fingerprintingProtection.granularOverrides & privacy.fingerprintingProtection.overrides preferences like we have previously. This makes it far easier for users to add their own overrides if needed. If you have previously configured either of these preferences, it is highly recommended to reset them after updating to these release. If you would like to disable our overrides to unbreak websites (as well as Mozilla's), you can do so by setting privacy.fingerprintingProtection.remoteOverrides.enabled to false in your about:config.
Added a Quick fixes list to uBlock Origin by default to allow us to work-around/fix issues caused by our default config significantly faster (while we wait on the upstream list maintainers to fix the issues...).

Implemented LibreWolf's Remote Settings Blocker patch to allow us (and users) to limit what collections are read/downloaded from Mozilla, and reduce the data shared. Users can configure this from the browser.ironfox.services.settings.allowedCollections preference in the about:config, though we would not recommend editing this unless necessary, as the collections we allow by default were carefully considered and provide important functionality, including for security.

Improved visibility of domains in the URL bar to better protect against phishing. - (Thanks to @mimi89999! 💜)

Significantly improved upon and expanded Mozilla's built-in certificate pinning to protect against MITM attacks. If you're a website operator and would like your domain to be added or want to request details be changed, please file an issue!
Took back control of all Safe Browsing preferences, meaning these can now be freely controlled by the users from the about:config (with the exception of browser.safebrowsing.malware.enabled & browser.safebrowsing.phishing.enabled - these are controlled by the new toggle in Settings). For example, users can now set their own custom Safe Browsing provider if desired, disable our proxy and revert back to Google's standard domains, etc...

Hardened the internal PDF Viewer (PDF.js) with changes inspired by GrapheneOS's PDF Viewer. - #79

Disabled CSP Reporting to improve privacy, reduce undesired network activity, and limit the data shared with website operators.

Enabled Proxy Bypass Protection to help prevent leaks for proxy users.
Fixed a bug that caused cookies/site data and permissions to always clear on exit, regardless of their check boxes/values set by users.

Disabled Firefox's new Unified Trust Panel redesign for the menu that appears when you select the lock icon on the top left of the URL bar by default, due to phishing concerns (as it unfortunately doesn't currently display the full URL if it's too long). - You can re-enable this if preferred by navigating to IronFox's Settings -> About IronFox -> Tap IronFox's logo at the top 5 times, then go back to Settings -> Secret Settings -> Unified Trust Panel.

Disabled the com.widevine.alpha key system (MediaDrm).

Disabled Mozilla's GeoIP/Region Service to prevent Firefox from monitoring the user's region/general location and reduce unwanted network activity.