Know what changed. Know what matters.

Apple patched a flaw that let users’ real addresses appear in Mail app logs after a year‑long discovery by Tyler Murphy.

Open‑source Android AI agents can covertly transmit commands via hidden overlays, letting attackers run code on connected PCs.

A new campaign named FakeGit hijacked thousands of GitHub repos to deliver SmartLoader malware via fake AI servers.

School files with children’s personal data sold on the dark web.

A newly uncovered Elasticsearch database contains more than 24 billion stolen username/password combinations, exposing a massive trove of compromised credentials that could be leveraged by attackers worldwide.

Sony announced new parental‑control tools aimed at giving parents visibility over their children’s PlayStation activity.

Sony stored user passwords without proper encryption, exposing them on December 9, 2018.

An unauthenticated attacker can run arbitrary code on any vulnerable WordPress core installation via crafted HTTP requests.

The U.S. National Telecommunications and Information Administration issued a July 22 report outlining measures to shield kids from digital harm, including stricter age verification and anti‑dark‑pattern design rules.

The European Commission ordered Google to give rival AI assistants access to Android’s mic, camera, screen, wake‑word detection while the display is off, and background app control by August 1 2027.

Attackers now conduct about 36 000 malicious scans per second—a 16.7 % increase from last year—raising concerns about rapid vulnerability discovery.

Researchers uncovered an IoT botnet framework that used a large language model to generate code, highlighting how AI lowers barriers to creating sophisticated malware.