Ivanti has released a security update for Endpoint Manager, patching two high-severity RCE flaws (CVSS 8.8) that could allow unauthenticated attackers to execute code.

Frankfurt am Main, Germany, 9th September 2025, CyberNewsWire

Google Gemini now supports audio file uploads for transcription and summarization, a top-requested feature with different usage limits for free and paid users.

A new Android banking trojan, RatOn, merges overlay fraud with NFC relay attacks, automated money transfers, and crypto wallet theft, posing a new threat to users.

A critical CSRF flaw in Rockwell Stratix switches (CVE-2025-7350) could allow unauthenticated remote attackers to achieve RCE. The flaw has a CVSS score of 9.6.

A major breach at Salesloft's Drift platform exposed customer authentication tokens, leading to unauthorized access of Salesforce data at over 750 companies.

Intel's upcoming 14A process node will be more expensive than its predecessor due to the use of advanced high-NA EUV lithography machines.

Google is expanding its AI Mode search to five new languages, including Japanese and Korean. The move brings advanced, localized AI to new markets.

Plex has confirmed a data breach that exposed user data, including hashed passwords. All users are being urged to reset their passwords as a security precaution.

Intel has announced a major executive reshuffle, including the departure of a key leader and the creation of a new division, in a move to accelerate its transformation.

SanDisk is raising prices on all consumer products by 10%, a move the company blames on surging demand for flash memory from AI and data centers.

Qualcomm and Google Cloud are teaming up to bring Gemini AI and other agentic experiences to vehicles, promising a new era of smarter, connected cars.

A critical SQL injection flaw (CVE-2025-58450) in pREST allows attackers to read sensitive files, steal credentials, and manipulate databases. Patching is urgent.

A key npm maintainer's account was compromised, leading to a supply chain attack. Malicious code in popular packages is stealing crypto during transactions.

Adobe has broken from its regular patch schedule to release an emergency fix for CVE-2025-54236, a vulnerability Sansec has dubbed SessionReaper. The flaw, described as one of the most severe in M…

A new phishing campaign is spreading MostereRAT, a sophisticated RAT that uses a Chinese scripting language and advanced evasion to bypass antivirus and EDR solutions.

A new report uncovers 45 previously unknown domains linked to the Chinese APT group Salt Typhoon. The findings reveal a long-term, multi-year espionage infrastructure.

Planet X is an intermediate level Android application CTF challenge. The aim of this CTF challenge is to learn and concentrate on the…

🔐Free Article Link.