A closer look at how attackers are misusing everyday AI tools like OpenAI’s API to sneak malware through trusted communication channels.

Google issued an urgent patch for CVE-2025-48593, a critical zero-click RCE flaw in Android (v13-16) that allows remote attackers to gain full device control. Update immediately.

Microsoft acknowledged a bug incorrectly displaying end-of-support warnings on supported Windows 10 LTSC/ESU editions. A cloud fix resolves the misleading notification.

Operation SkyCloak targets Russian/Belarus defense with a multi-stage backdoor using OpenSSH and Tor/obfs4 for stealthy C2. The malware checks for sandboxes before execution.

Google's Big Sleep AI found 5 WebKit flaws (buffer overflow, memory corruption) in Safari. Apple patched all operating systems; update immediately.

iOS 26.2 beta code suggests Apple is enabling third-party app stores in Japan to comply with new antitrust laws. Users report accessing AltStore & Epic Games Store.

Apple will reportedly pay Google $1B annually to license Gemini AI to power the next-gen Siri's "summarizer" and "planner" functions within its Private Cloud Compute.

Apple will disable automatic Wi-Fi credential sync on Apple Watch in the EU starting with iOS 26.2. The change stems from a dispute over accessory interoperability.

Microsoft Store now supports multi-app batch installation, allowing users to select and install multiple recommended apps from a curated list in a single click.

Google Maps integrates Gemini AI, replacing Assistant for natural, complex navigation and quick task handling. New features include Landmark Directions and Google Lens integration.

Google and Epic settled their antitrust suit, proposing changes to open the Play Store. The deal mandates third-party stores, alternative payments, and new fee caps (9-20%).

Amazon issued a cease-and-desist to Perplexity's Comet AI browser, demanding it stop automated purchasing. Amazon calls it a bot; Perplexity calls it a user agent.

A Microsoft bug is forcing Windows 10/11 users into BitLocker Recovery Mode after updates. Affected Intel-based PCs need the recovery key to regain access to data.

Microsoft released an unusual Windows 11 Insider test build (26220.7052) that installs without requiring a system restart, hinting at future update process improvements.

Apple issued a DMCA takedown to GitHub, forcing the deletion of over 8,270 repositories and forks containing the leaked App Store web front-end source code.

Cisco patched two Critical flaws in Unified CCX. CVE-2025-20354 (CVSS 9.8) risks unauthenticated root RCE via Java RMI, and CVE-2025-20358 allows admin bypass via the CCX Editor application.

Google exposed AI-enabled malware like PROMPTFLUX, which uses the Gemini API to dynamically rewrite its own source code to evade detection. APT28 was seen deploying an LLM-assisted stealer.

Django released urgent patches (v5.2.8+) for a Critical SQL Injection flaw (CVE-2025-64459) affecting QuerySet methods via the _connector keyword, risking remote database compromise.

The Day a College Student Found What Our Team Missed

Hi — am Vipul behind TheHackersLog 👋 — and today we’re diving into something that’s changing recon forever: how hackers (and smart…

Introduction