Alright, you’ve made it this far. Now we leave the relatively sane world of the LAN. If you recall my fever-dream of a network diagram…

Mozilla’s popular VPN app that could let attackers run code on your Windows PC, with a $6,000 reward for spotting it.

Apple SVP Greg Joswiak teased the M5 chip launch on X, hinting at imminent releases of the M5 MacBook Pro, iPad Pro, and a Vision Pro refresh, all featuring enhanced AI support.

To avoid multi-billion-dollar EU fines, Google is reportedly redesigning its search results to prevent self-preferencing, displaying rivals like Expedia equally to its own Flights and Hotels services.

OpenAI established a Council on Well-Being and AI to guide development and address mental health risks. The move follows lawsuits over teens' use of chatbots for suicidal ideation.

Rockwell issued an urgent fix for a Critical (CVSS 10.0) auth bypass in its 1783-NATR router (CVE-2025-7328). The flaw allows remote admin takeover and configuration disruption.

Veeam patched two Critical RCE flaws (CVE-2025-48983 & -48984) in Backup & Replication v12 that let authenticated domain users compromise backup infrastructure.

The DOJ indicted Prince Group Chairman Chen Zhi for a forced-labor pig butchering scam empire and filed a record $15B civil forfeiture complaint against 127,271 Bitcoin assets.

A sophisticated GhostBat RAT campaign targets Indian users by spoofing RTO apps (mParivahan). The malware steals UPI credentials and OTPs via phishing pages and uses a Telegram bot for C2.

Google released an urgent update for Chrome (v141.0.7390.107), patching a High-severity Use-After-Free flaw (CVE-2025-11756) in the Safe Browsing component. Update immediately.

Microsoft patched 193 vulnerabilities this month, including six zero-days (four exploited) and issued the final update for Windows 10 (KB5066791).

Sekoia details PolarEdge, a Rust-based backdoor using a custom mbedTLS server for C2 on Cisco, QNAP, and Synology devices. The backdoor uses XOR 0x11 for config obfuscation and attempts to delete system utilities to block rivals.

Proofpoint exposed TA585, a self-reliant group that uses ClickFix phishing and private C2 infrastructure (CoreSecThree) to deploy MonsterV2 RAT (available for up to $2,000/month) with Hidden VNC capabilities.

Rockwell patched a flaw (CVE-2025-9067) in FactoryTalk Linx allowing SYSTEM privilege escalation via MSI repair hijacking. Other flaws risk file deletion and DoS in ICS environments.

intigriti/Challenge 1025

Discover Naabu, ProjectDiscovery’s port scanner. Learn how to use it, key flags, and reconnaissance pipelines.

A comprehensive guide to ranking local businesses in just two weeks using a five-step system that aligns with Google’s local algorithm…

When Microsoft announced the end of free support for Windows 10, many saw it as a bureaucratic formality. In reality, it was a declaration…

Vladimir Tsakanyan

The internet is part of our everyday lives, from checking emails and shopping online to managing finances and staying connected. While it…

Vladimir Tsakanyan