Critical supply chain attack hits eScan antivirus. Hackers hijacked updates to install malware and disable the AV. Manual patch required.

CISA warns of CVSS 10 flaw CVE-2025-26385 in Johnson Controls Metasys. Remote SQL execution possible. Patch now or close TCP port 1433.

Ivanti confirms critical EPMM RCE flaws (CVE-2026-1281) are exploited in the wild. Unauthenticated attackers can compromise MDM. Patch immediately.

Critical Kyverno flaw CVE-2026-22039 (CVSS 10) allows policy creators to gain cluster admin rights. Update to v1.16.3 to fix privilege escalation & DoS.

"SessionReaper" (CVE-2025-54236) targets Magento stores. Attackers use zombie tokens to gain root access. 200+ sites compromised. Patch now.

"Amazon Ads Blocker" extension exposed for stealing creator revenue. It hijacks affiliate links to divert commissions to the developer. Uninstall it now.

NVIDIA patches high-severity flaws (CVE-2025-33217) in GPU drivers & vGPU software. Flaws allow code execution. Update Windows/Linux drivers now.

Attackers are bypassing AWS SES sandbox limits by pivoting to WorkMail. Rapid7 reveals how this abuse creates a blind spot for defenders.

Amazon confirms 16,000 new layoffs in Jan 2026, completing a 30,000-person cut. Discover how the titan is swapping managers for Generative AI tech.

NVIDIA replaces Apple as TSMC's largest customer in Jan 2026. Discover how the $33B AI chip boom is rewriting the rules of the silicon industry.

YouTube is faking regional blocks to break ad-blockers in Jan 2026! Discover the "technical frustration" strategy behind the new "unavailable" errors.

Microsoft Defender's Smart App Control is blocking ASUS Armoury Crate in Jan 2026. Learn why your ROG Ally controls are broken and how to fix it.

Windows 11 intentionally kills dial-up modems in Jan 2026! Discover why Microsoft removed Agere and Motorola drivers to fix critical security flaws.

Ming-Chi Kuo predicts iPhone 18 prices will stay flat in 2026. Discover how Apple plans to absorb rising memory costs to crush its competition.

Google Chrome is testing a new auto-launch toggle in Jan 2026. Learn how to enable the foreground startup feature for near-instant boot response.

Windows 11 Build 26300.7674 is here! Learn how to use this rare 2026 "migration window" to switch from the Dev Channel to the Beta Channel safely.

Celebrate Data Privacy Day 2026 with Apple’s 10 best security tools. From Private Cloud Compute to Locked Apps, take control of your digital footprint.

In response to the escalating proliferation of cyber offensives and the pervasive shadow of espionage, WhatsApp, the communication vanguard under the Meta umbrella, has announced the inauguration …

When Ivanti removed the embargoes from CVE-2026-1281 and CVE-2026-1340 - actively exploited pre-auth Remote Command Execution vulnerabilities in Ivanti’s Endpoint Manager Mobile (EPMM) solution - we sighed with relief.

Clearly, the universe had decided to…

Well, well, well - look what we’re back with.

You may recall that merely two weeks ago, we analyzed CVE-2025-52691 - a pre-auth RCE vulnerability in the SmarterTools SmarterMail email solution with a timeline that is typically reserved for KEV hall-of-famers.…

This scenario simultaneously tests identity confirmation tooling (SSPR, MFA, Conditional Access), how users act under pressure, and the organization's ability to detect and follow-up on social engineering attacks.