Apache has released version 2.4.68 of its widely-deployed HTTP Server, addressing 13 security vulnerabilities ranging from moderate to critical severity. The patched flaws include use-after-free conditions, denial-of-service vectors, cross-site scripting (XSS) vulnerabilities, and buffer overflow is
The Federal Communications Commission (FCC) has eliminated the July 2026 deployment deadline for Amazon’s Project Kuiper low Earth orbit (LEO) satellite broadband constellation. This regulatory relief removes pressure on Amazon to launch half of its planned 3,236 satellites by the original deadline,
Cybercriminals are weaponizing Microsoft Teams to impersonate IT support staff, exploiting the platform’s trusted workplace status to conduct social engineering attacks. Attackers leverage external access features and Teams’ chat functionality to deceive employees into surrendering credentials, inst
Recent testing has confirmed that Russian satellites possess the capability to jam GPS signals across entire continents, representing a significant escalation in electronic warfare capabilities. This space-based jamming threatens critical infrastructure, aviation, maritime navigation, financial syst
NFCShare, a sophisticated Android banking trojan, is actively spreading through fraudulent banking app updates hosted on GitHub repositories. The malware specifically targets Near Field Communication (NFC) functionality to steal payment card data and intercept banking credentials. Attackers are leve
Apple’s upcoming macOS 27 will exclusively support Apple Silicon processors, officially ending support for Intel-based Macs. This architectural shift eliminates an entire class of x86-64 vulnerabilities, significantly reduces the operating system’s attack surface, and forces security teams to reasse
A critical vulnerability in the Linux kernel, stemming from a single character typo in the netfilter subsystem, allows unprivileged local users to escalate privileges to root access. The flaw affects multiple kernel versions and has working proof-of-concept exploits publicly available. Immediate pat
The Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to patch by specified deadlines. The additions include critical flaws current
Apple’s upcoming iOS 27 introduces an automatic password change feature that detects compromised credentials and replaces them without user intervention. This system leverages Apple’s Password Manager integration with known breach databases to identify at-risk accounts and securely generate new pass
Cybercriminals are exploiting Google’s advertising platform to distribute a sophisticated macOS backdoor dubbed “FlutterBridge.” The campaign uses malicious ads that appear at the top of Google search results, mimicking legitimate software downloads. When users click these ads, they’re redirected to