OpenAI launched Aardvark, a GPT-5 powered agent that autonomously detects, reproduces, and generates fixes for software vulnerabilities in real time.

A developer managed to shrink a fully bootable Windows 7 copy to 69MB—smaller than a mobile app. The feat demonstrates the limits of OS minimalism.

A surge of 760+ Android apps in Eastern Europe use NFC relay/HCE mechanisms to bypass payment security and execute fraudulent contactless transactions.

CISA confirms active exploitation of Linux kernel flaw (CVE-2024-1086) for root access via ransomware. The 10-year-old bug affects most major Linux distributions.

A critical flaw allows indirect prompt injection to trick Claude into exfiltrating user data via its File API by substituting an attacker's access key. Anthropic warns users.

AI browsers like Edge Copilot & ChatGPT Atlas create new risks. Researchers warn agentic automation amplifies data theft via hidden instructions and zero-day vulnerabilities.

Microsoft signed a 5-year, $9.7B deal with IREN for NVIDIA GB300 GPU compute capacity, part of a strategy to meet surging global demand for its Azure AI services.

OpenAI signed a $38B deal with AWS for cloud computing infrastructure, diversifying its resources after ending exclusivity with Microsoft. AWS gains a major AI client.

Microsoft is simplifying Windows Update names by removing OS version, date, and architecture—a change criticized by admins for degrading readability and context.

Developer @XenoPanther created a Windows 7 build that occupies just 69 MB. The ultra-compact OS successfully boots but is primarily a fascinating proof of concept.

Microsoft Authenticator will purge Entra ID credentials from jailbroken/rooted devices starting Feb 2026 to block token theft, enforcing security for enterprise accounts.

Apple unveiled a fully featured web-based App Store homepage with search, cross-platform toggles (iOS, macOS, watchOS), and a curated "Today" section.

Edge v142.0 introduces cross-platform passkey sync, letting users reuse passkeys securely across devices with a PIN, enhancing passwordless authentication.

Apple has officially released iOS 26.1, introducing two noteworthy new features. First, users can now disable the translucent “Liquid Glass” effect, increasing background opacity for improved clar…

Gemma is an open-source artificial intelligence model developed by Google, available to all developers through Google AI Studio and other distribution channels. However, developers may now find it…

In an example of how threat actors are adapting to modern AI ecosystems, Microsoft’s Incident Response – Detection and Response Team (DART) has uncovered a sophisticated espionage-focused backdoor…

Redis, the world’s leading in-memory data platform, has issued an urgent patch addressing a high-severity vulnerability (CVE-2025-62507, CVSSv4 7.7) that could allow remote code execution (RCE) un…

Proofpoint exposed cyber-enabled cargo theft where criminals use phishing to deliver RMM tools (ScreenConnect, SimpleHelp). They hijack load boards and dispatch systems to steal physical freight worth millions.

Hey there!😁

If you’re ready to elevate your bug bounty and pentesting game, it’s time to lock in on the challenge that’s got the community buzzing…

Ahoy fellow hunters🏹;