Trojanized RVTools push Bumblebee malware in SEO poisoning campaign
In response to our questions about the attack, Dell states that the malicious RVTools installer was not distributed from its sites but rather from fake typo-squatted domains. The company also states that the Dell-managed sites, Robware.net and RVTools.com, were taken offline as they are being targeted in DDoS attacks. “Dell Technologies operates two websites to distribute our RVTools […]
OpenAI plans to combine multiple models into GPT-5
OpenAI is planning to combine multiple products (features or models) into its next foundational model, which is called GPT-5. ChatGPT currently has too many capable models for different tasks. While the models are powerful, it can be confusing because all models have identical names. In a Reddit AMA thread, Jerry Tworek, who is a VP at […]
Fake KeePass password manager leads to ESXi ransomware attack
Threat actors have been distributing trojanized versions of the KeePass password manager for at least eight months to install Cobalt Strike beacons, steal credentials, and ultimately, deploy ransomware on the breached network. WithSecure’s Threat Intelligence team discovered the campaign after they were brought in to investigate a ransomware attack. The researchers found that the attack […]
O2 UK patches bug leaking mobile user location from call metadata
A flaw in O2 UK’s implementation of VoLTE and WiFi Calling technologies could allow anyone to expose the general location of a person and other identifiers by calling the target. The problem was discovered by security researcher Daniel Williams. The flaw likely existed on O2 UK’s network since February 2023, and was resolved yesterday. O2 UK is […]
Windows 10 emergency updates fix BitLocker recovery issues
Microsoft has released out-of-band updates to fix a known issue causing Windows 10 systems to boot into BitLocker recovery after installing the May 2025 security updates. To fix systems stuck at a BitLocker recovery prompt, install today’s KB5061768 emergency update, available exclusively through the Microsoft Update Catalog. This is also a cumulative update, meaning you won’t have […]
Microsoft unveils Windows AI Foundry for AI-powered PC apps
Microsoft is replacing ‘Copilot Runtime’ with Windows AI Foundry to help developers build, experiment, and reach users with AI experiences in their apps. Windows AI Foundry will not only include Microsoft’s model but other open-source models as well, including those from Nvidia, such as NVIDIA NIM. With these models, developers can integrate new AI experiences […]
Arla Foods confirms cyberattack disrupts production, causes delays
Arla Foods has confirmed to GeekFeed that it was targeted by a cyberattack that has disrupted its production operations. The Danish food giant clarified that the attack only affected its production unit in Upahl, Germany, though it expects this will result in product delivery delays or even cancellations. “We can confirm that we have identified […]
Microsoft confirms new “Advanced” Settings for Windows 11
At the Build 2025 developer conference, Microsoft announced a new ‘Advanced Settings’ feature to help users and developers personalize the OS experience. With ‘Advanced’ settings, you can customize several features of Windows 11, such as File Explorer and Virtual Machines. The new ‘Advanced’ Settings page can be accessed from Settings > System > Advanced. It […]
Microsoft open-sources Windows Subsystem for Linux at Build 2025
Microsoft has open-sourced the Windows Subsystem for Linux (WSL), making its source code available on GitHub, except for a few components that are part of Windows. This marks a milestone for a project that started as an experiment almost a decade ago but has grown to become a very popular tool in Windows. WSL was first […]
UK Legal Aid Agency confirms applicant data stolen in data breach
The United Kingdom’s Legal Aid Agency (LAA) has confirmed that a recent cyberattack is more serious than first believed, with hackers stealing a large trove of sensitive applicant data in a data breach. This confirmation of the data breach incident comes from the UK government, which was closely involved in the investigations that followed the […]