OpenAI launched Sora, a new short-video platform built on its Sora 2 model that generates video and audio content. The AI-first service is currently invite-only on iOS.

OpenAI launched Instant Checkout in ChatGPT, powered by the new Agentic Commerce Protocol (with Stripe). The feature allows users to complete purchases within the chat.

The malicious PyPI package SoopSocks masqueraded as a SOCKS5 proxy but secretly installed a Go-based backdoor with SYSTEM privileges, leaking system data to a Discord webhook.

A critical flaw (CVE-2025-7493) in FreeIPA allows authenticated users to exploit Kerberos alias checks to gain full domain administrator privileges. Patch to v4.12.5 now.

Unit 42 uncovers Phantom Taurus, a new Chinese APT using the fileless NET-STAR backdoor to target SQL databases and IIS servers in global espionage campaigns.

Patchwork APT has launched a new campaign in South Asia, exploiting DLL sideloading and obfuscation to deliver malware that masquerades as VLC media player for deep espionage.

OpenSSL patches three flaws, including CVE-2025-9230 (RCE/DoS risk) and a SM2 timing side-channel (CVE-2025-9231) that could allow private key recovery on ARM64.

Cleafy uncovers Klopatra, a new Android RAT using commercial Virbox obfuscation and native code to target banks in Spain/Italy, allowing invisible remote device control.Export to Sheets

The Datzbro Android Trojan is targeting seniors via fake Facebook groups and AI content. The hybrid malware can remotely control devices and steal banking credentials.

A Grooza cluster smishing campaign is exploiting unauthenticated APIs on 500+ industrial routers (Milesight) to send phishing texts impersonating Belgian and French government services.

Free Link 🎈

Maxon Codes In today’s fast-changing digital era, cyber security is no longer optional — it’s essential. With increasing threats, data…

A cautionary tale about staying secure in public networks.

A System Administrator’s Guide to Keeping Linux Safe in a Modern Threat Landscape

In today’s digital world, all companies, whether small or large, depend on technology. Technology can have weak spots, which are flaws in…

OEM Sponsorship in Cybersecurity Communities: Why It’s the Next Big Play

Phishing has become a high-stakes art of deception: attackers copy logos, copy site copy, and create near-perfect imitations that trick…

TrustedSec released Titanis, a cross-platform C# library (.NET 8) implementing key Windows protocols (SMB2, Kerberos, NTLM, MSRPC) for security testing and research.

Pro-Iranian group Handala claims to have compromised Spacecom's ground stations and leaked 379GB of data, though satellite control systems appear safe.