Android GhostMap Flaw Can Trigger Persistent Boot Loops
Bitdefender researchers say a malformed APK can crash Android system services in a loop, leaving affected phones unusable until a factory reset.
NIKKE PC Launcher Breach Adds Malware Scan Tool
Level Infinite added malware detection and removal to NIKKE’s Windows PC client after attackers tampered with launcher scripts and distributed malware.
OpenAI Pipeline Finds 948 Linux Privilege-Escalation Flaws
OpenAI says its AI research pipeline found 948 distinct Linux privilege-escalation flaws and generated candidate patches in a $1.21 million run.
CZ Warns of Fake Trust Wallet Website in Phishing Scam
Binance co-founder Changpeng Zhao has warned cryptocurrency users about a phishing website impersonating Trust Wallet to steal funds.
cPGuard Breach Exposed 7,900 Customer Records
OPSShield says attackers copied 7,900 billing records and ran a malicious cPGuard update as root on about 2,950 customer servers.
Vercel Adds Device-Bound Sessions to Stop Cookie Replay
Vercel is gradually rolling out device-bound session credentials for vercel.com logins, making stolen cookies harder to reuse from another device.
mSecure Confirms Encrypted Cloud Database Was Stolen
mSeven says an attacker obtained an encrypted mSecure Cloud database copy affecting cloud-sync users, but it has no evidence the stored information was accessed.
Snap Surpasses 30 Million Snapchat+ Paid Subscribers
Snap says Snapchat+ and its premium services have surpassed 30 million paid subscribers as the company expands subscriptions and AI-powered features.
Lovable Apps Exposed Passport Data and 200,000 Chat Messages
A scan of 159,041 Lovable projects found exposed passport details, customer records and more than 200,000 chat messages in apps with misconfigured Supabase access controls.
OpenAI Images 2.6 Adds GIF Creation and Faster Image Editing
OpenAI has introduced Images 2.6, an updated image-generation model that brings faster creation, more precise editing and native animated GIF support to ChatGPT and Codex.
Supermarket Fridge Attacks Claimed by Pro-Russian Groups
NoName057(16) and Z-Pentest claimed the attacks on European supermarket refrigeration systems, but their involvement has not been independently verified.
Grok Bot Can Now Make Phone Calls to Handle Everyday Tasks
Grok Bot, the AI assistant developed by Elon Musk’s xAI, can now make phone calls to US businesses on behalf of users, helping them handle tasks such as negotiating bills, booking appointments and canceling subscriptions.
Xen Flaws Let Guest VMs Read and Write Other VMs’ Memory
Two Xen grant-copy flaws let malicious guest VMs read and write other guests’ memory, including Dom0. No known mitigation exists.
Loading
