Lara De Jong
-

Google Brings AirDrop Compatibility to Android’s Quick Share Using Rust-Hardened Security
Google has made a significant move: Android’s Quick Share now works with Apple’s AirDrop, enabling easier file and photo transfers between Android and iPhone devices. This cross-platform sharing feature, initially for Pixel 10 and expanding to more Android devices, was built with memory-safe Rust for robust security against common vulnerabilities, ensuring direct peer-to-peer transfers without…
-

Cabinet does not yet want to block takeover of cloud company Solvinity
The Dutch cabinet is reviewing a potential acquisition of cloud company Solvinity, which handles critical services like DigiD. Demissionary Minister Frank Rijkaart noted concerns but stated it’s too soon to block the deal, initiating a full investigation into the implications. Solvinity’s vital infrastructure supports key government systems, prompting questions from the House of Representatives. The…
-

10 Cyber Security Tools for 2025
Cybersecurity tools protect devices, systems, applications, networks, and data from cyber threats. These solutions improve security posture, manage compliance, and maintain reputation, preventing costly fixes.
-

Kimsuky and Lazarus Join Forces in Coordinated Attacks
North Korean hacking groups Kimsuky and Lazarus combine forces. They exploit zero-day vulnerabilities in coordinated attacks, targeting critical sectors worldwide. This marks a shift in state-sponsored threat operations.
-

Kratos Opens New Turbojet Engine Production Hub
Kratos Defense opens a new turbojet engine production hub in Michigan. This expansion increases capacity for unmanned aerial systems for the U.S. military and allies. Focuses on affordable mass and evolving defense needs.
-

ThinPLUS OS Command Injection Vulnerability (CVE-2025-13284)
A critical OS Command Injection vulnerability (CVE-2025-13284) in ThinPLUS allows unauthenticated remote attackers to execute arbitrary commands, posing significant risks to system integrity. TWCERT/CC urges immediate patching.
-

IndonesianFoods-worm Floods NPM Registry
A sophisticated self-replicating ‘IndonesianFoods-worm’ has flooded the npm registry with tens of thousands of malicious packages. This aggressive campaign, documented by SourceCodeRed and JFrog, poses a significant threat to the software supply chain.
-

ShadowMQ Flaw Exposes AI Inference Engines to Remote Code Execution
Oligo Security found a recurring ZeroMQ/pickle deserialization flaw affecting multiple AI inference frameworks; several vendors have issued patches.
-

Phishing Campaign Targets Travel Websites
A Russian-speaking threat group launched a sophisticated phishing campaign, creating over 4,300 fake travel websites to steal payment information from hotel guests.
-

Autonomous Air Systems Explained
Autonomous Air Systems (AAS) advance aerial technology, moving beyond traditional remote-controlled drones to platforms that operate independently. These systems integrate advanced artificial intelligence, machine learning, and sophisticated sensor arrays to perform complex missions with minimal human intervention.
