It has been a long time since I wrote the Part I, Part II was supposed to come out in a month but sometimes life takes us on a different…

Is that email really from your bank?

Questions:

A flaw in the Unity Runtime (CVE-2025-59489) allows local code execution in games via DLL injection through the Android intent handler. Developers must rebuild their apps.

The UK consumer group Which? filed a £480M lawsuit against Qualcomm, alleging the chipmaker used its dominance to charge excessive fees, inflating prices for Apple and Samsung users.

A Critical flaw (CVE-2025-11230) in HAProxy’s mjson number parser allows unauthenticated attackers to cause a Denial of Service with a single crafted JSON payload. Update immediately.

OpenAI has acquired Roi, an AI investment app, and its CEO, Sujith Vishwajith, to enhance ChatGPT's functionality with personalized financial advice and portfolio management.

The TamperedChef malware campaign used a trojanized PDF editor, delivered via malvertising, to stealthily harvest browser credentials after operating undetected for two months.

The "Trinity of Chaos" alliance (Lapsus$, Scattered Spider, ShinyHunters) launched a DLS, listing 39 firms, including Google and Cisco, and claiming 1.5 billion stolen records.

A critical RCE flaw in DrayTek Vigor routers can be exploited without authentication via the web interface if EasyVPN is enabled, granting remote root access.

Oracle issued an emergency alert for a Critical RCE flaw (CVE-2025-61882) in E-Business Suite that requires no authentication.

Trend Micro uncovered "Water Saci," a self-propagating malware (SORVEPOTEL) that hijacks WhatsApp Web sessions to spread aggressively and steal Brazilian banking credentials.

QNAP patches NetBak Replicator and Qsync Central. Flaws include a DLL hijacking risk and critical SQL Injection that allows remote attackers to execute code.

Apple's supply chain in India has created 350,000 jobs and grown to include 45 local partners. The entire iPhone 17 series is set to be fully assembled in India.

Redis patched a Critical (CVSS 10.0) RCE flaw (CVE-2025-49844) in Lua scripting. An authenticated attacker can exploit a Use-After-Free bug to gain code execution.

Cloudflare launched a Content Signals Policy to update robots.txt, giving creators machine-readable controls to specify if their content can be used for AI training or search summarization.

We rarely stop to question the little tools we use every day. WinRAR, for instance — that humble program most of us keep around just to…

Sunday Reflection: Building a Cyberpreneur Mindset in a Compliance-Driven World

Cybersecurity is the hottest IT field today because digital threats are growing faster than ever.