LIVE · cybersecurity feed
Live wire
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context InjectionMalware Hijacks Android Car Head UnitsCritical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command ExecutionCVE-2026-73570 · U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalogCVE-2024-3094 · Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply ChainHow an Emerging Industrial Protocol Family Could Put OT at Risk14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2Hundreds of leaked AWS keys give full control over corporate accountsAndroid Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetMalware injected into popular Rust packages to steal developer credentials
patch

Windows 11 24H2 Home and Pro reach end of support in 2 months

Microsoft has reminded customers that systems running Home and Pro editions of Windows 11 24H2 will stop receiving updates in two months. [...]

zeroday.news ·

Microsoft has issued a reminder that Home and Pro editions of Windows 11 version 24H2 will reach their end-of-life for updates on October 13, 2026. After this date, devices running these specific editions will no longer receive monthly security or non-security preview updates, leaving them vulnerable to new security threats.

In contrast, the Enterprise and Education editions of Windows 11 24H2 will continue to receive mainstream support until October 2027. This distinction highlights a difference in support timelines based on the edition of the operating system.

Users of the Home and Pro editions are strongly advised to upgrade to Windows 11 version 25H2, also known as the Windows 11 2025 Update. This update became generally available in September 2024 and is delivered as a minor update via an enablement package.

For devices running Windows 11 24H2 Home and Pro that are not managed by IT departments, the upgrade to Windows 11 25H2 will occur automatically. However, users retain the option to choose when to restart their systems or postpone the update installation.

To check for the update, eligible Windows 10 or Windows 11 users can navigate to "Settings," then "Windows Update," and select "Check for updates." If the device is ready, an option to "Download and install Windows 11, version 25H2" will be presented.

Microsoft provides additional information on Windows servicing dates through its Lifecycle Policy search tool and the Windows Lifecycle FAQ page. The company also maintains a list on its support website detailing all products scheduled for retirement or end of support in 2025.

This announcement follows previous support changes, including the cessation of security updates for Home and Pro editions of Windows 11 23H2 in November 2025. Additionally, Microsoft quietly extended the free Windows 10 Extended Security Updates (ESU) program for consumers by an extra year, until October 2027, in June. Windows Server 2022 is also nearing its mainstream end-of-support date in October 2026, after which it will transition to extended support, providing security updates until October 14, 2031.

patch
ShareXLinkedInWhatsAppFacebook

More News

view all →
malware

ToxicPanda Android malware uses VPN permissions to block Google Play

The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands. [...]

iran

UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

Hackers linked to Iran have successfully disabled a small UK power plant for four days, marking the first confirmed attack of its kind against the nation's energy infrastructure. The incident occurred concurrently with cyberattacks targeting water facilities across 12 US states. While the UK power plant's outage did not impact the national grid, the attack served as a demonstration of capability, with intentions likely focused on showcasing access rather than causing widespread disruption.

ransomware

Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Windows 11’s strongest security defenses can be bypassed without a screwdriver Researchers from the University of Birmingham and Durham University have found a way to knock down some of the toughest protections in Windows 11 without physically opening or modifying the target machine. The attack assume

aihigh

Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

Researchers at Adversa AI have developed a novel attack called Cryptographic Context Injection, which bypasses AI safety filters by embedding malicious instructions within AES-encrypted payloads. This technique tricks AI models like xAI's Grok and Google's Gemini into decrypting and executing these hidden commands. In the case of Grok, the attack can lead to zero-click theft of user chat histories and personal data by disguising the malicious payload as a webpage summary request.

breach

Welcoming the Sri Lankan Government to Have I Been Pwned

Today, we welcome the 48th government onboarded to Have I Been Pwned’s free gov service: Sri Lanka. Sri Lanka CERT now has access to monitor Sri Lankan government domains against the data in HIBP, helping identify exposed government accounts and respond when they appear in new data breaches.

security

Postal Service moves to finalize mail ballot regs before SCOTUS ruling

The rules have already been rejected by multiple state courts, but the Trump administration said it’s preparing in case of a favorable Supreme Court decision. The post Postal Service moves to finalize mail ballot regs before SCOTUS ruling appeared first on CyberScoop.