Apple’s macOS 27 Golden Gate introduces significant security enhancements that extend far beyond its marketed AI features. Key improvements include mandatory kernel extension validation, enhanced sandboxing for third-party applications, expanded FileVault protections, improved network filtering capa
Traditional vulnerability management is collapsing under the weight of AI-accelerated exploit development. Security leaders are pivoting budget from legacy scanning tools to Breach and Attack Simulation (BAS) platforms as attackers weaponize vulnerabilities in hours instead of weeks. This shift repr
VRChat, the popular social virtual reality platform, has suffered a massive data breach affecting approximately 2.4 million users. Threat actors successfully exfiltrated sensitive user information including email addresses, usernames, and potentially account details. The breach highlights ongoing se
The UK government has issued a mandate requiring smartphones and tablets marketed to children to include nude image blocking technology by September 2025. This regulatory intervention marks a significant shift in child online safety policy, compelling device manufacturers and OS providers to impleme
A critical zero-day vulnerability in Microsoft’s BitLocker encryption has been discovered by the Chaotic Eclipse research team, enabling complete bypass of the disk encryption mechanism in just four hours of focused research. The exploit targets a fundamental weakness in BitLocker’s authentication p
Automated License Plate Readers (ALPRs) have evolved beyond capturing vehicle information to now tracking mobile devices, creating unprecedented surveillance capabilities. Modern ALPR systems integrate Bluetooth, WiFi, and cellular signal detection to link vehicles with phone MAC addresses and devic
Fortinet has released security patches for a critical vulnerability in FortiSandbox that could allow unauthenticated attackers to execute arbitrary code remotely. The flaw, affecting multiple versions of the sandbox analysis platform, represents a significant risk to organizations relying on FortiSa
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These campaigns leverage YouTube tutorials, TikTok videos, and Instagram posts promising free account upgrades, but instead deliver sophisticated inf
Security researchers have disclosed a sophisticated zero-click exploit chain targeting Google’s Pixel 10 devices that achieves full root access without any user interaction. The attack leverages vulnerabilities in the device’s messaging subsystem and kernel, allowing remote attackers to compromise d
A sophisticated China-linked botnet known as JDY has compromised over 1,500 small office/home office (SOHO) routers and IoT devices, creating a weaponized infrastructure for rapid vulnerability exploitation. The botnet demonstrates advanced capabilities including automated scanning, multi-stage expl