Sucuri uncovers a complex multi-stage malware campaign infecting WordPress sites via header.php to deliver a hidden RAT (client32.exe) and evade detection.

Meta AI is testing a feature to access unuploaded photos from your camera roll for content suggestions, sparking privacy concerns despite claims it's opt-in and not for ad targeting

A flaw (CVE-2025-4679) in Synology ABM leaked a static client_secret, allowing unauthenticated attackers read-only access to all Microsoft 365 tenants with ABM installed.

Google launches Doppl, an experimental AI app in the US. It creates personalized digital avatars for virtual try-ons and animated videos of users wearing different outfits.

ASEC uncovers sophisticated attacks targeting South Korean Windows IIS and Linux systems, deploying WogRAT, MeshAgent, and SuperShell for cyber-espionage and lateral movement.

Meta is reportedly in talks to acquire PlayAI, a voice-generation AI startup, to strengthen its AI voice tech and multimodal capabilities, following its Scale AI investment and superintelligence push.

Apple has launched the Swift on Android Workgroup to bring formal Swift support to Android, aiming for seamless cross-platform app development and enhanced tooling.

A new Snake Keylogger campaign exploits an undocumented DLL sideloading technique via jsadebugd.exe to target energy and logistics sectors with fake oil deals.

Google unveils Gemma 3n, a groundbreaking open-source, on-device multimodal AI model. It brings high-end performance to mobile devices via MatFormer architecture and memory optimizations.

Unlock the Secrets to Finding and Fixing This Critical Vulnerability

How to Detect, and Exploit Using Logger++, Burp, and Scripting

Silence the 404s and Unearth Hidden Paths with Smarter Wordlist Strategy

A Deep Dive into Exploiting and Reporting a $1,160 Bounty-Winning IDOR Vulnerability in GitLab’s Machine Learning Model Registry

Unique and super helpful tools in your OSINT journey

Task 2 — Writing IDS Rules (HTTP)

Windows 11 25H2 Dev Build introduces deeper password manager integration, starting with 1Password, allowing Windows Security to use and save passkeys via Windows Hello.

Android 16 introduces new "Mobile Network Security" features, including network alerts and 2G protection, to detect and counter Stingray devices, requiring IRadio HAL 3.0 modem support.

Nicholas Michael Kloster pleaded guilty to hacking organizations to promote his cybersecurity services, facing up to 5 years in prison for his illegal "self-promotion" tactics.

Rapid7 warns of a critical flaw (CVE-2024-51978, CVSS 9.8) in 689 Brother and other printer models that allows remote admin password deduction from serial numbers, unfixable by firmware on existing units.

ClickFix attacks surged 517% in a year, tricking users into executing malicious code. A new "FileFix" tactic exploits Windows File Explorer for stealthy malware delivery.

Microsoft's active Windows device count has reportedly dropped by 400 million in three years, from 1.4 billion (2022) to just over 1 billion, signaling a shrinking user base.