Top stories
Daxin Malware Reemerges in Taiwan; New Stupig Backdoor Found
The Daxin malware has been discovered in a Taiwan manufacturing firm after being dormant for over four years, alongside a new backdoor called Stupig. This development highlights ongoing threats to critical infrastructure and the sophistication of malware that can evade detection for years.
105,000 nano-oscillators synchronized in 45 nanoseconds, advancing computing methods
Researchers have synchronized 105,000 nano-oscillators in 45 nanoseconds using minimal energy, significantly scaling oscillator-based computation. This development may lead to faster, energy-efficient alternatives to transistors for various applications, including real-time data analytics and AI.
Spirals ransomware encrypts networks within 24 hours after initial compromise
A new ransomware group, Spirals, compromised an IT services firm in South Asia and completed data theft and encryption in under 24 hours. The rapid expansion of ransomware capabilities poses significant threats to corporate network security.
Moroccan insider exposes use of Pegasus spyware on dissidents and officials
A former intelligence official revealed that Morocco utilized Pegasus spyware to target journalists and politicians from 2017 to 2021. This raises concerns about surveillance practices and human rights violations in the country.
NVIDIA Launches Jetson Thor Computers for Robotics and Edge AI
NVIDIA has announced the T3000 and T2000 modules based on the Thor architecture, designed for robotics and edge AI applications. These new modules provide enhanced AI computing capabilities in compact form factors, supporting the growing demand for autonomous machines in various industries.
73% of Tech Job Listings Now Require AI Skills Amid Job Market Shift
A report indicates that 73% of tech job listings in the U.S. currently require AI skills, a significant increase from 15% in January 2024. This shift reflects the growing expectation among employers for job seekers to demonstrate practical AI fluency alongside their domain expertise.
Anthropic prepares for potential IPO with investor meetings scheduled
Anthropic is organizing investor meetings ahead of a potential IPO this year, showcasing its readiness for the public market. The AI firm, which gained significant valuation recently, appears set to be one of the first major players in the AI sector to go public.
Linux kernel will increasingly adopt Rust programming language
The Linux kernel is moving towards integrating Rust for some subsystems, as stated by maintainer Greg Kroah-Hartman. Rust's ownership and type system could significantly reduce the number of common vulnerabilities, estimated to eliminate around 80% of current issues caused by C programming errors.
Intel ships high-volume logic chips using ASML's High NA EUV technology
Intel has begun high-volume manufacturing of logic chips using ASML's High NA EUV lithography for its Panther Lake processors. This milestone marks the first commercial application of High NA EUV, promising advancements in semiconductor scaling and performance for future processors.
FBI Reports Over $893 Million Lost to AI Voice Fraud in 2025
The FBI's 2025 report reveals over 22,000 complaints linked to AI voice fraud, resulting in losses exceeding $893 million. This new category highlights the increasing sophistication of voice manipulation scams, particularly affecting vulnerable populations.
Ukraine conducts record 2,500km drone strike on Russia's Gazprom Neft refinery
Ukrainian FP-1 drones struck the Gazprom Neft refinery in Omsk after a 2,500 km flight, marking the longest-range drone strike of the war. The operation halted production at Russia's largest gasoline producer and showcased tactical advancements in Ukrainian drone capabilities.
Claude AI Mismanagement Leads to Data Leakage Risk
An exploit demonstrated that AI assistants like Claude can unintentionally leak sensitive user data without notification. This raises serious concerns about the security of personal information stored in AI memory systems.
Europe invests heavily in drones for enhanced military capabilities
Europe is significantly increasing drone investments in response to security needs post-Ukraine invasion. NATO, the U.K., and Germany are among key players in this shift, allocating billions for drone capabilities to reshape modern warfare.
German Scientists Warn of Possible 3 °C Global Warming by 2050
The German Physics Society and Meteorological Society warn that global warming could reach 3 °C by 2050, suggesting an acceleration of climate change. They cite current data aligning more with worst-case scenarios from the IPCC, urging stronger climate action to mitigate this risk.
Tailscale vulnerabilities allowed DoS and unauthorized root access
Tailscale issued a security advisory for two vulnerabilities, one allowing denial of service through malformed HTTP requests and another permitting unauthorized root access via specially crafted SSH usernames. Affected users are advised to upgrade to Tailscale version 1.98.9 or newer to resolve these issues.
Global Surge in Malicious Traffic Linked to Smart Appliances
Anubis' reputation database reveals that 80-90% of malicious traffic hits originate from IPs not in threat monitoring lists, suggesting a widespread issue with compromised smart appliances. This indicates a significant increase in the vulnerability of IoT devices to threats and the need for global action.
Spanish Police Dismantle €140 Million Cyber Fraud Network, Four Arrested
Spanish Police have dismantled a cybercrime organization involved in €140 million of investment fraud and business email compromise (BEC), arresting four individuals. This operation highlights a sophisticated scheme utilizing over 800 bank accounts and numerous accomplices to launder significant amounts of illicit funds.
US military employs explosive drone boats in combat for the first time
The US military has deployed explosive-laden drone boats in combat, striking an Iranian submarine and naval port. This significant shift marks the first combat use of sea drones by the US and highlights evolving naval warfare techniques.
Finland issues wanted notice for hacker behind Vastaamo psychotherapy data breach
Finnish police have issued a wanted notice for Aleksanteri Kivimäki after his appeal was denied. Kivimäki was convicted for hacking psychotherapy provider Vastaamo and extorting patients, with implications for cybercrime accountability.
LabubaRAT Trojan Disguised as NVIDIA Software Targets Windows Systems
Researchers discovered LabubaRAT, a new Rust-based remote access trojan masquerading as NVIDIA software. Its ability to blend into target environments and perform extensive monitoring and control functions poses significant risks for affected systems and organizations.
DeepSeek in talks to raise $1.5B ahead of potential IPO in 2027
DeepSeek, a Chinese AI model developer, is seeking to raise $1.5 billion at a $71 billion valuation. The company's IPO could occur as early as late 2023, increasing its financial backing after a recent $7 billion funding round.
Researcher Identifies Security Flaws in Major LLMs Allowing Dangerous Exploits
Researcher Dave Kuszmar found vulnerabilities in large language models (LLMs) that allow circumvention of safety measures, enabling the generation of harmful instructions. This revelation indicates an industry-wide security issue, prompting calls for a halt to LLM deployment until safety measures are improved.
Musk’s Colossus 2 data center allegedly installed unpermitted gas turbines impacting local communities
Elon Musk's Colossus 2 data center reportedly installed 59 unpermitted natural gas turbines, impacting nearby Mississippi communities with pollution. The NAACP has filed a lawsuit citing a significant rise in nitrogen oxide emissions linked to these operations.
Iran exploited telecom vulnerabilities to track U.S. military in the Middle East
The Iranian government exploited vulnerabilities in telecom infrastructure, specifically SS7, to locate U.S. military personnel during the Iran War. This espionage resulted in targeted attacks on U.S. forces, leading to injuries.
OpenAI requires hardware-backed passkeys for TAC members starting September 1
OpenAI announced that all individual members of its Trusted Access for Cyber must use hardware-backed passkeys for account security starting September 1. This mandate is intended to enhance protection against phishing and social engineering attacks, ensuring that access to critical AI capabilities is limited to trusted users.
VMware Avi Load Balancer Patches 7 Critical Vulnerabilities
Broadcom announced patches for seven vulnerabilities in VMware Avi Load Balancer, including critical authentication bypass and remote code execution issues. Organizations are advised to update promptly to prevent potential exploitation, especially as VMware flaws have been targeted in past attacks.
Microsoft Entra ID adopts passkeys as default authentication by September 2026
Starting September 2026, Microsoft Entra ID will replace SMS and voice authentication with passkeys as the default method. This transition aims to enhance security against credential theft and phishing attacks, as SMS and voice authentication will be retired in February 2027.
Research Reveals Privacy Flaws in 85 Crypto Wallet Extensions
A study by KU Leuven on 85 popular crypto wallet extensions identified significant privacy vulnerabilities, including user address leaks and tracking risks. These weaknesses could potentially enable tracking of users across different websites, undermining the anonymity intended by these wallets.
AI chatbots produce predictable passwords, research reveals security risks
Research indicates that passwords generated by AI chatbots like Claude and ChatGPT display predictable patterns, undermining their security. The findings suggest that using trusted password generators is a safer alternative for creating secure passwords.
Researchers develop programmable thermal device for advanced heat management
Osaka Metropolitan University researchers created a programmable thermal device that can direct heat without power, potentially enhancing thermal management in high-performance chips and silicon photonics. This innovation overcomes traditional limitations on heat absorption and emission, leading to advancements in radiative cooling and thermal communication.
148 npm Packages Created DDoS Botnet Using Student Proxy Disguise
A research report details how 148 npm packages disguised as student proxies turned browsers into a DDoS botnet for two weeks in May. This operation exploited students' need to bypass web filters, transforming their devices into attack traffic sources that operated without users' knowledge.
Indian scientists create detailed 3D atlas of the human brainstem
Scientists at IIT Madras developed Anchor, a 3D atlas of the human brainstem, detailing over 200 cell clusters. This atlas combines neuroimaging and cellular data, enhancing understanding of this critical brain region.
Microsoft Identifies Salesforce Breach Tactics Linked to ShinyHunters
Microsoft's research reveals that ShinyHunters exploited Salesforce environments using OAuth trust relationships, without exploiting flaws in the platform. This activity highlights vulnerabilities tied to common third-party vendor connections and employee consent, leading to unauthorized data access.
Japan develops method to recover 90% lithium from used EV batteries
Japanese scientists have created a method to recover up to 90% lithium from used EV batteries. This process significantly enhances recycling efficiency and could reduce Japan's reliance on lithium imports, stabilizing supply chains.
Ukrainian drone strikes halt Russian shipping in Sea of Azov
Ukrainian drone strikes have forced Russia to cease all shipping operations in the Sea of Azov, effectively blocking vital maritime corridors. This has resulted in further isolation of the Russian-occupied Crimean Peninsula and potential disruptions to Russian grain exports, impacting global wheat prices.
Google and Microsoft Remove ModHeader Extension After Hidden Data Collector Found
Google and Microsoft have removed the ModHeader extension, with 1.6 million installs, after a dormant browsing-history collector was discovered within it. Although the collector was inactive, the potential for future data gathering raised significant privacy concerns.
2026 Public Sector M-Trends Report Highlights Alarming Cybersecurity Trends
The 2026 Public Sector Threat Landscape report reveals significant vulnerabilities in cybersecurity for the public sector, including a 22-second median hand-off to ransomware operators. These findings underscore an urgent need for rapid, machine-speed defenses amidst evolving attack methods that exploit trust boundaries.
MemGhost Attack Alters AI Agents' Memories with One Email
Researchers unveiled a new attack method, MemGhost, that allows attackers to implant false memories in AI assistants using a single email. This stealth memory injection alters how the AI responds in future sessions, raising significant concerns about the security of AI systems that retain user information.
UK charges five in connection with Russian Coms spoofing platform
UK authorities have charged five individuals linked to the Russian Coms caller ID spoofing platform, which facilitated over 1.8 million scam calls. This platform, operational since 2020, enabled criminals to impersonate financial institutions and law enforcement, leading to significant financial losses for victims worldwide.
Centers Laboratory Data Breach Impacts Over 540,000 Individuals
Centers Laboratory reported a data breach affecting 542,377 individuals, revealing personal and health information. The breach occurred due to limited access by cybercriminals from the WorldLeaks group, which highlights ongoing threats to healthcare data security.