The UK government has issued a mandate requiring smartphones and tablets marketed to children to include nude image blocking technology by September 2025. This regulatory intervention marks a significant shift in child online safety policy, compelling device manufacturers and OS providers to impleme
A critical zero-day vulnerability in Microsoft’s BitLocker encryption has been discovered by the Chaotic Eclipse research team, enabling complete bypass of the disk encryption mechanism in just four hours of focused research. The exploit targets a fundamental weakness in BitLocker’s authentication p
Automated License Plate Readers (ALPRs) have evolved beyond capturing vehicle information to now tracking mobile devices, creating unprecedented surveillance capabilities. Modern ALPR systems integrate Bluetooth, WiFi, and cellular signal detection to link vehicles with phone MAC addresses and devic
The OceanLotus APT group (APT32) has launched a sophisticated cyber-espionage campaign dubbed “FireAnt” targeting Vietnamese investors and financial sector entities. The operation leverages a newly identified backdoor malware called SPECTRALVIPER, delivered through weaponized documents disguised as
Fortinet has released security patches for a critical vulnerability in FortiSandbox that could allow unauthenticated attackers to execute arbitrary code remotely. The flaw, affecting multiple versions of the sandbox analysis platform, represents a significant risk to organizations relying on FortiSa
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These campaigns leverage YouTube tutorials, TikTok videos, and Instagram posts promising free account upgrades, but instead deliver sophisticated inf
Security researchers have disclosed a sophisticated zero-click exploit chain targeting Google’s Pixel 10 devices that achieves full root access without any user interaction. The attack leverages vulnerabilities in the device’s messaging subsystem and kernel, allowing remote attackers to compromise d
A sophisticated China-linked botnet known as JDY has compromised over 1,500 small office/home office (SOHO) routers and IoT devices, creating a weaponized infrastructure for rapid vulnerability exploitation. The botnet demonstrates advanced capabilities including automated scanning, multi-stage expl
Microsoft has resolved a critical BitLocker recovery bug affecting Windows Server 2025 that prevented administrators from accessing encrypted drives during system recovery scenarios. The issue caused BitLocker recovery keys to fail validation, potentially locking organizations out of critical data.
A critical zero-day vulnerability in Microsoft Exchange Server is being actively exploited through weaponized email attacks. Threat actors are leveraging this previously unknown flaw to gain unauthorized access to corporate mail servers, execute remote code, and establish persistent access to compro