Wealthsimple confirms a security incident affecting less than 1% of its clients due to a third-party software compromise. No funds or passwords were lost.

A new botnet called NightshadeC2 uses "UAC Prompt Bombing" to force users to approve malicious actions, bypassing Windows Defender and analysis sandboxes.

Havoc is a modern and malleable post-exploitation command and control framework. It handles the listeners, teamserver authentication and payload generation

A new remote access trojan, CastleRAT, has been discovered. It's part of a growing MaaS ecosystem and is being used to distribute stealers and other malware.

The EU has fined Google €2.95B for favoring its own ad tech services, a practice that distorted competition and harmed rivals, advertisers, and publishers.

A hacker group is threatening to leak Google's databases unless the company fires two of its security staff and ceases its investigations.

The arrest of XSS.is administrator "Toha" has thrown the cybercrime underground into turmoil. A new report details the forum's downfall and its fractured community.

Siemens has disclosed a critical flaw in its SIVaaS platform. A network share is exposed without authentication, allowing unauthenticated attackers to access or alter sensitive data.

Ivanti has released a security update for Endpoint Manager, patching two high-severity RCE flaws (CVSS 8.8) that could allow unauthenticated attackers to execute code.

Frankfurt am Main, Germany, 9th September 2025, CyberNewsWire

Although Google’s Gemini AI has long been capable of analyzing images, PDF files, and even uploaded videos, support for audio files had remained absent—a disappointment for users who rely on AI to…

A new Android banking trojan, RatOn, merges overlay fraud with NFC relay attacks, automated money transfers, and crypto wallet theft, posing a new threat to users.

A critical CSRF flaw in Rockwell Stratix switches (CVE-2025-7350) could allow unauthenticated remote attackers to achieve RCE. The flaw has a CVSS score of 9.6.

A major breach at Salesloft's Drift platform exposed customer authentication tokens, leading to unauthorized access of Salesforce data at over 750 companies.

Intel's upcoming 14A process node will be more expensive than its predecessor due to the use of advanced high-NA EUV lithography machines.

Google is expanding its AI Mode search to five new languages, including Japanese and Korean. The move brings advanced, localized AI to new markets.

Plex has confirmed a data breach that exposed user data, including hashed passwords. All users are being urged to reset their passwords as a security precaution.

Intel has announced a major executive reshuffle, including the departure of a key leader and the creation of a new division, in a move to accelerate its transformation.

SanDisk is raising prices on all consumer products by 10%, a move the company blames on surging demand for flash memory from AI and data centers.