Cellik, a sophisticated Android remote access trojan, has been identified in a campaign attributed to the LongNosedGoblin threat actor group. The malware's distribution through the official Google Play Store represents a significant supply chain risk, as it leverages platform trust to reach a broad user base.

Security researchers have discovered critical UEFI vulnerabilities affecting motherboards from ASRock, ASUS, GIGABYTE, and MSI that enable direct memory access (DMA) attacks during the early boot phase. These flaws, tracked as CVE-2025-11901, CVE-2025-14302, CVE-2025-14303, and CVE-2025-14304, pose significant risks to cloud computing environments, data centers, and gaming infrastructure.

IBM has issued a critical security warning regarding an authentication bypass vulnerability in IBM API Connect, tracked as CVE-2025-13915. This vulnerability impacts organizations across banking, healthcare, retail, and telecommunications sectors that rely on API Connect for managing and securing their application programming interfaces.

Recent Ivanti EPMM attacks leveraging CVE-2025-4427 and CVE-2025-4428 have exposed critical vulnerabilities in enterprise mobility management infrastructure. The FRP threat vector is actively targeting financial services, UK government agencies, hospitals, and telecommunications providers.

As financial services and housing sectors navigate an increasingly complex threat landscape, the intersection of artificial intelligence and cybersecurity has become a critical policy priority. Industry leaders and government stakeholders are examining how AI capabilities can strengthen defenses while addressing regulatory requirements and operational resilience.

Security researchers have confirmed that JS#SMUGGLER, a threat actor group, is systematically compromising legitimate websites to serve as distribution vectors for NetSupport RAT, a remote access trojan. This multi-stage attack leverages website vulnerabilities to inject malicious code, enabling attackers to establish persistent access to victim systems.