🚨 New NTLM flaw (CVE-2025-24054) is being actively exploited to steal Windows credentials—just by downloading a file. No clicks, no execution needed.

This "low-interaction" bug leaks NTLMv2 hashes via SMB—perfect for pass-the-hash attacks.

🔗 Details here: https://thehackernews.com/2025/04/cve-2025-24054-under-active.html

🚨 New XorDDoS Variant Targets U.S. Servers!

The malware is now hijacking Docker and Linux systems via SSH brute-force attacks.

A new “VIP” controller spotted in 2024 suggests it’s being sold as a service, expanding botnet operations.

Full story → https://thehackernews.com/2025/04/experts-uncover-new-xorddos-controller.html

Flow Music

A Material 3 Youtube Music Client without ads and subscription.

🔗 Links:
- Downloads: GitHub
- Screenshots
- Features
- Source Code
Developer: Abhiram79

❗️Friendly reminder:

If you find it useful, You may star the repo, donate to the developer, or perhaps you may also contribute to the development of this project.

🏷 Tags: #Android #music

👀 Attackers are now using multi-stage payloads that slip past detection—via simple tricks, not complex code.

One phishing email = 3 malware strains:
• Agent Tesla
• Remcos RAT
• XLoader

🔐 Plus: a new MysterySnail variant is targeting Mongolia & Russia—40+ commands, remote access, and evasion built-in.

➡️ See the full analysis: https://thehackernews.com/2025/04/multi-stage-malware-attack-uses-jse-and.html

🎨 Google is preparing to make Android Settings a bit more colorful

As part of its new, more expressive design, the Android Settings app will have colorful icons on its homepage

What do you think of these icons?

Check them out 👇

🔗 https://www.androidauthority.com/android-settings-homepage-icon-colors-3545863/

Here's what you should know about the Ubuntu 25.04 release. 👇

https://news.itsfoss.com/ubuntu-25-04-release/

Shell-secrets – GPG-encrypted environment variables
Article, Comments

Kagi Assistant is now available to all users
Article, Comments

Deafening Silence from the Cybersecurity Industry
Article, Comments

Free high-performance cross-platform game engine
Article, Comments

Xubuntu 25.04 is here!

https://news.itsfoss.com/xubuntu-25-04/

If you have a desktop and upgrade parts, there are some considerations that have to be made.

https://www.xda-developers.com/my-psu-just-blew-up-heres-what-id-ill-do-to-avoid-that-happening-again/

⚠️ Alert: Fake E-ZPass Texts Target Drivers in 8 U.S. States

A widespread smishing scam is tricking drivers into fake toll payments to steal card info.

🔹 Linked to China-based Smishing Triad
🔹 Phishing kits sold by CS student Wang Duo Yu
🔹 Used in 121+ countries

🔗 Full story: https://thehackernews.com/2025/04/chinese-smishing-kit-behind-widespread.html

📵 Avoid clicking toll links in texts.

AMP and why emails are not (and should never be) interactive
Article, Comments

📱📱A new Android 16 setting makes your Pixel Fold work better with magnetic cases

Android 16 Beta 4 adds a new option "robust open/close detection" setting that improves hinge detection when your foldable is put in a magnetic case

More details👇

🔗 https://www.androidauthority.com/pixel-fold-robust-open-close-detection-3546037/

A Deep Dive into Ulefone Armor 30 Pro Rear Display: Features & Functionality Exposed
https://www.gizchina.com/2025/04/18/ulefone-armor-30-pro-dual-screen/

🔒Is your Pixel phone missing Screen-off Fingerprint Unlock? Here's how to enable it in Android 16 Beta 4

The Screen-off Fingerprint Unlock lets Pixel phones use fingerprint unlock even when the screen is off

More details + how to reenable it👇

🔗 https://www.androidauthority.com/enable-screen-off-fingerprint-unlock-android-16-beta-4-3546058/

Tor Browser 14.5 Introduces Android Connection Assist
—> https://linuxiac.com/tor-browser-14-5-introduces-android-connection-assist/

Judge Rules Blanket Search of Cell Tower Data Unconstitutional
Article, Comments