Apple unveiled the M5 chip built on 3nm technology with a 10-core GPU boasting 4X faster AI performance than M4. It features a 15% faster CPU and powers the new Pro devices.

ChatGPT Plus/Pro subscribers now get Automatic Memory Management. The new feature automatically deletes older memories based on priority to prevent "memory full" errors and simplify maintenance.

Wiz found 550+ secrets (PATs, API keys) leaked in 500+ VSCode extensions, enabling an attacker to push malicious updates to 100K+ developers. Dotfiles were the main culprit.

CISA added a Critical (CVSS 10.0) RCE flaw (CVE-2025-54253) in Adobe Experience Manager Forms to its KEV Catalog due to active exploitation. Patch is mandatory by Nov 5.

F5 disclosed a breach by a "highly sophisticated nation-state" that stole BIG-IP source code and internal vuln info. CISA issued an Emergency Directive mandating immediate patching of 44 flaws.

"Operation Zero Disco" exploits a critical Cisco SNMP flaw (CVE-2025-20352) to deploy Linux rootkits on switches. The malware sets a universal "disco" password and hides configuration to maintain persistence.

Samba released an urgent fix for a Critical (CVSS 10.0) RCE flaw (CVE-2025-10230) allowing unauthenticated command injection on AD DCs when the WINS hook is enabled. Update to 4.23.2.

Unit 42 exposed PhantomVAI Loader, a stealthy MaaS tool that uses steganography (hiding DLL in images) and VM detection to deploy Katz Stealer in MSBuild.exe and exfiltrate crypto credentials globally.

Symantec exposed China's Jewelbug APT in an unprecedented 5-month intrusion on a Russian IT provider. The group used Yandex Cloud for data exfiltration and Graph API for stealthy C2 via custom malware.

Apache issued a critical fix for ActiveMQ NMS AMQP Client (CVE-2025-54539). The deserialization flaw allows untrusted AMQP servers to execute remote code on client systems.

Multiple major online services, including YouTube, X/Twitter, and Steam, suffered simultaneous outages suspected to be caused by a temporary datacenter route failure primarily affecting the U.S. East Coast.

Kaspersky exposed the Mysterious Elephant APT targeting South Asia. The group uses MemLoader and custom tools (BabShell) to steal sensitive WhatsApp desktop data and exfiltrate documents.

ReliaQuest exposed Flax Typhoon for a year-long breach, where the China-backed APT turned a legitimate ArcGIS Java SOE into a web shell and embedded it in backups to ensure persistence.

Keeping your network secure starts with knowing what’s exposed. This guide shows you how to use Naabu, the powerful open-source port…

Your terminal isn’t just for code — it can talk, play, and even laugh. These 10 hidden Linux commands are pure geeky joy.

Are you able to compromise this Terminator themed machine?

web->dirbrust->command excution->bypass->reveshell->hidden file->su user->find PE

Task 1: Brief

Imagine getting a ZIP file from a friend or colleague on WhatsApp maybe a receipt, a document or a payment confirmation. You open it on…

The Hacker Duel “Mission Accomplished”