Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This report details how attackers are exploiting a patched Realtek Jungle SDK vulnerability to install Cling botnet malware on unpatched routers and DVRs. Cling embeds multiple router and DVR exploits and uses STUN-based traffic for practical command-and-control, making infections stealthy and hard to distinguish from ordinary network activity.
The article reports that Apple will update macOS Full Disk Access settings to address risks from AI agents that obtain deep system access. Apple argues that this permission bypasses user privacy controls and commits to ensuring users clearly understand the consequences before granting it, though a rollout date was not provided.
This brief report announces that OpenAI will show visual advertisements in ChatGPT during image generation as part of a broader expansion of ads. The company is rolling out this new format, though specific timelines and targeting details are not disclosed.
This is a short promotional piece from Broadcom Symantec celebrating the engineers responsible for the company's security defenses. It uses the tagline 'Because legendary security doesn't engineer itself' to reinforce the importance of human expertise in product development and threat response.
This article reports that Microsoft's KB5124010 Windows 11 preview update causes crashes in games and applications that use AC-3 Dolby Digital audio decoding. Microsoft confirmed the issue over the weekend, and users are advised to uninstall the update if affected.
Google has paused its open-source bug bounty program because of a surge in AI-generated spam reports that overwhelmed the review process. The company aims to reassess submission guidelines to filter out automated junk.