A UEFI bootkit called BlackX has infected fully patched Windows machines by exploiting a vulnerability Microsoft patched years ago but failed to fully revoke, leaving systems vulnerable despite security updates.

Tesla will halt Cybertruck production around mid-next year at its Texas facility to shift resources toward Cybercab self-driving taxi manufacturing, as CEO Elon Musk redirects the company’s focus toward robotics and autonomous vehicles.

Palantir lobbied a health minister via WhatsApp to extend its AI technology into NHS GP records, despite government assurances that such data would remain outside the company’s contract scope.

France has attributed cyberattacks on supermarket refrigerators to Iranian state-backed hackers, causing food spoilage and fires. Experts warn that AI-enabled attacks could significantly escalate the threat level.

A critical OpenSSH vulnerability called *sshole is being actively exploited to gain unauthorized access to Linux systems, with multiple hacker groups conducting intrusions within days of its public disclosure.

PHP maintainers announced two critical vulnerabilities with severity ratings of 9.2 out of 10, planning emergency patches within hours to address widespread security risks affecting millions of websites.

An official Anthropic Claude extension for Cursor was compromised for nearly 12 hours, potentially affecting up to 5,000 developers with a persistent SSH backdoor installed on their machines.

VMware unveiled vSphere Express, a lower-cost virtualization product for small and medium-sized businesses supporting up to 128 cores, representing an effort to recapture customers alienated by pricier enterprise-focused offerings.

Researchers attributed a hacking campaign exploiting patched iOS and Android vulnerabilities to Russia’s Foreign Intelligence Service, targeting diplomatic sites and visitors including a U.S. independence celebration website.

Google, Meta, and TikTok filed lawsuits challenging a California law designed to restrict social media features that could addict children under 16, citing free speech concerns.

A critical vulnerability dubbed *sshole affects Alpine Linux and potentially other systems, allowing password-free SSH access to certain device configurations under specific conditions.

Disney and Adobe announced a multiyear partnership to develop customized generative AI models for Disney’s productions, theme parks, and ESPN content.