Latest

Microsoft has reported that the August 2025 Windows security updates may trigger unexpected User Account Control (UAC) prompts and cause issues with application installations. The bug affects users without administrator rights across all supported versions of Windows. Root Cause: Security Fix in Windows Installer The issue stems from a patch

Analysts at Check Point have warned that threat actors are leveraging a new AI framework called HexStrike AI—originally designed for offensive cybersecurity—to exploit fresh n-day vulnerabilities in real-world attacks. Activity on the Darknet Researchers observed discussions related to HexStrike AI on darknet forums, where hackers described using the

Analysts at Guardio Labs have discovered that threat actors are exploiting the Grok AI assistant—integrated into the social network X—to bypass link placement restrictions designed to block malicious advertising. How the Attack Works According to researchers, advertisers often post questionable videos containing adult material but omit direct links

New anti-spam regulations that took effect on September 1 are causing widespread disruption to business communications. According to media reports, telecom operators—acting under legal requirements to limit spam calls—have begun blocking all calls from commercial organizations, leaving banks, developers, and market research firms scrambling to move customer interactions

An independent cybersecurity researcher known as BobDaHacker has discovered security flaws in the products of Pudu Robotics, a leading global supplier of commercial service robots. The vulnerabilities made it possible for attackers to redirect robots to arbitrary locations and force them to execute unauthorized commands. The Company and Its Products

Google developers have released security updates for Android that fix 120 vulnerabilities in the operating system. According to the company, two of these issues have already been used by hackers in targeted attacks. The 0-days patched this month have been assigned the identifiers CVE-2025-38352 (7.4 out of 10 on

Sophos researchers have uncovered a cyberattack in which unknown threat actors abused the open-source endpoint monitoring and forensics tool Velociraptor. “In this incident, the attackers used the tool to download and run Visual Studio Code, likely with the intention of creating a tunnel to a command-and-control server under their control,