Google unveils VaultGemma, the first LLM trained with differential privacy. The open-source model achieves near non-private performance, setting a new standard for privacy-first AI.

Two critical vulnerabilities (CVSS 10 & 9.8) in Digiever NVRs allow unauthenticated attackers to steal credentials and execute commands. Update your firmware immediately.

Researchers expose BaoLoader, a malware operation that has systematically used at least 26 code-signing certificates over seven years to appear legitimate and bypass security.

A critical flaw in LangChainGo, a popular LLM framework, allows attackers to read sensitive files via server-side template injection. A patch has been released.

A new report reveals a major surge in phishing attacks targeting U.S. energy companies like Chevron, using cloned websites to steal credentials and financial data.

IBM X-Force reveals new findings on Hive0154, a China-aligned threat actor using an upgraded Toneshell backdoor and a new USB worm to target organizations.

Researchers have found a new Spectre-like attack called VMScape that allows a malicious VM to steal data from a hypervisor on Intel and AMD CPUs.

Trend Micro reveals a new global malware campaign, EvilAI, that impersonates productivity and AI tools to infiltrate organizations and steal data.

Apple's new N1 network chip for the iPhone has a key Wi-Fi 7 limitation, capping bandwidth at 160 MHz. This affects peak performance despite the upgrade.

New patches for CUPS, the open-source Linux printing system, fix two flaws that can lead to remote DoS and authentication bypass.

Microsoft is testing a full-screen "SCOOBE" interface in Windows 11 to remind users about Microsoft 365 subscriptions, and it may block access to the desktop.

Summary

A New Phishing Threat Is Targeting Python Developers

People imagine hacking as late-night code and flashy exploits. That’s the movie. The real truth I learned from studying psychology is…

This is a wasm based xss challenge. Quick overlook will tell you that the frontend reads a base64 encoded string from URL, then decodes are…

This report systematically analyzes the cyber-attack activities of the Russia-based cybercrime group SectorJ149 in November 2024

How Learning the Internet’s Secret Language Changed My Career, And Can Change Yours Too lea

Power-up your Linux skills and get hands-on with some common utilities that you are likely to use day-to-day!

You will be learning how to log in to a Linux machine using SSH, how to advance your commands, file system interaction.

It’s Not Just Code; It’s a Crime Scene