OpenSSL patches three flaws, including CVE-2025-9230 (RCE/DoS risk) and a SM2 timing side-channel (CVE-2025-9231) that could allow private key recovery on ARM64.

Cleafy uncovers Klopatra, a new Android RAT using commercial Virbox obfuscation and native code to target banks in Spain/Italy, allowing invisible remote device control.Export to Sheets

The Datzbro Android Trojan is targeting seniors via fake Facebook groups and AI content. The hybrid malware can remotely control devices and steal banking credentials.

A Grooza cluster smishing campaign is exploiting unauthenticated APIs on 500+ industrial routers (Milesight) to send phishing texts impersonating Belgian and French government services.

Free Link 🎈

Maxon Codes In today’s fast-changing digital era, cyber security is no longer optional — it’s essential. With increasing threats, data…

A cautionary tale about staying secure in public networks.

A System Administrator’s Guide to Keeping Linux Safe in a Modern Threat Landscape

In today’s digital world, all companies, whether small or large, depend on technology. Technology can have weak spots, which are flaws in…

OEM Sponsorship in Cybersecurity Communities: Why It’s the Next Big Play

Phishing has become a high-stakes art of deception: attackers copy logos, copy site copy, and create near-perfect imitations that trick…

TrustedSec released Titanis, a cross-platform C# library (.NET 8) implementing key Windows protocols (SMB2, Kerberos, NTLM, MSRPC) for security testing and research.

Pro-Iranian group Handala claims to have compromised Spacecom's ground stations and leaked 379GB of data, though satellite control systems appear safe.

The unified Semicon Coalition, representing all 27 EU states, demands a revision of the Chips Act and the launch of a Chips Act 2.0 to secure the continent's chip supplies.

OpenAI's GPT-5 provided a key insight that helped mathematicians prove strict limitations for the quantum complexity class QMA, advancing abstract computational theory.

CISA has added the critical Sudo LPE flaw (CVE-2025-32463, CVSS 9.3) to its KEV catalog, mandating federal agencies patch the bug that allows local users to gain root access.

Asahi Group reports a cyberattack that paralyzed its Japanese distribution network and call center, threatening significant financial losses due to supply suspension.

Chinese national Zhimin Qian pleaded guilty in London after police seized 61,000 BTC, now worth $6.9 billion—the world's largest crypto confiscation—linked to a massive fraud.

A new self-hosted tool has been unveiled for analyzing Apple IPSW files. It extracts binary entitlements and frameworks, significantly reducing storage needs for firmware research.

FlareProx is a new tool on GitHub that quickly deploys an HTTP proxy using Cloudflare Workers, enabling stealthy traffic routing for developers and security researchers.