Microsoft kills more Microsoft Account bypasses in Windows 11
Microsoft is removing more methods that help users create local Windows accounts and bypass the Microsoft account requirement when installing Windows 11. The change was introduced in the Windows 11 Insider Preview Build 26220.6772 (KB5065797) for Insiders in the Dev Channel, indicating that it will likely be included in future production builds. The company claimed […]
Google’s new AI bug bounty program pays up to $30,000 for flaws
This week, Google has launched an AI Vulnerability Reward Program dedicated to security researchers who find and report flaws in the company’s AI systems. The new bug bounty program focuses on the most impactful issues in the highest-profile AI products, including but not limited to Google Search (on google.com), Gemini Apps (Web, Android, and iOS), […]
Red Hat data breach escalates as ShinyHunters joins extortion
Enterprise software giant Red Hat is now being extorted by the ShinyHunters gang, with samples of stolen customer engagement reports (CERs) leaked on their data leak site. News of theĀ Red Hat data breachĀ broke last week when a hackingĀ group known as the Crimson Collective claimed to have stolen nearly 570GB of compressed data across 28,000 internal development […]
Microsoft: Critical GoAnywhere bug exploited in ransomware attacks
A cybercrime group, tracked as Storm-1175, has been actively exploiting a maximum severity GoAnywhere MFT vulnerability in Medusa ransomware attacks for nearly a month. Tracked as CVE-2025-10035, this security flaw impacts Fortra’s web-based secure transfer GoAnywhere MFT tool, caused by a deserialization of untrusted data weakness in the License Servlet. This vulnerability can be exploited remotely in low-complexity […]
Microsoft: Running multiple Office apps causes Copilot issues
Microsoft is investigating a bug that causes Copilot issues when multiple Office apps are running simultaneously on the same system. According to a support document published on Friday, this bug impacts Microsoft 365 customers who launch Excel, Word, PowerPoint, OneNote, Publisher, and Access on the same system. The issue is triggered when one Office application, […]
Zeroday Cloud hacking contest offers $4.5 million in bounties
A new hacking competition called Zeroday Cloud, focused on open-source cloud and AI tools, announced a total prize pool of $4.5 million in bug bounties for researchers that submit exploits for various targets. The contest is launched by the research arm of cloud security company Wiz in partnership with Google Cloud, AWS, and Microsoft, and is scheduled for […]
ChatGPT Pulse is coming to the web, but no word on free or Plus roll out
OpenAI’s ChatGPT Pulse, which is a tool that gives you personalised updates based on usage patterns, is coming to the web. OpenAI began rolling out ChatGPT Pulse for mobile users on September 25, but it works only when you use $200 Pro subscription. ChatGPT Plus isn’t available on the web, but that will change soon. […]
OpenAI is testing ChatGPT-powered Agent Builder
OpenAI is building a tool that will allow you to create your own AI Agents. AI startups are convinced AI agents are the future and OpenAI’s AI Builder could be the Visual Studio moment for building agentic experiences. As spotted on X, OpenAI Agent Builder has a flowchart where you drop small blocks (called nodes) and connect […]
Redis warns of critical flaw impacting thousands of instances
The Redis security team has released patches for a maximum severity vulnerability that could allow attackers to gain remote code execution on thousands of vulnerable instances. Redis (short for Remote Dictionary Server) is an open-source data structure store used in approximately 75% of cloud environments, functioning like a database, cache, and message broker, and storing […]
LinkedIn sues ProAPIs for using 1M fake accounts to scrape user data
LinkedIn has filed a lawsuit against Delaware company ProAPIs Inc. and its founder and CTO, Rehmat Alam, for allegedly scraping legitimate data through more than a million fake accounts. ProAPIs activity constitutes a violation of LinkedInās terms of service (ToS), based on which the company seeks to get the courtās approval for a permanent injunction, […]