Author: Zach_Wilson
An incredibly popular JavaScript library might have some worrying malware issues
CVE-2025-12735 in expr-eval allows remote code execution via unsafe input evaluation Vulnerable versions ≤2.0.2; patched in 2.0.3 and forked in expr-eval-fork 3.0.0 Developers should sanitize variables and avoid untrusted input in evaluate() calls A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to…
Read More
ElevenLabs’ new AI marketplace lets brands use famous voices for ads
ElevenLabs is launching an online marketplace that allows companies to license AI-replicated voices of famous figures for their content and advertisements. The AI audio startup says its new Iconic Voice Marketplace resolves some of the ethical concerns around using AI-generated celebrity voices by providing brands with the “consent-based, performer-first approach…
Read More
Google Photos lets iPhone users edit images by describing changes
Google is rolling out several AI updates to its Google Photos app, including iOS support for conversational edits, more accurate facial editing, and new AI tools. This means the “Help me edit” feature that lets you describe how you want Google’s AI to change your photos will be available to…
Read More
Amazon’s like-new Kindle Paperwhite Signature Edition is on sale for just $127
If you didn’t get around to reading more this year, now’s a great time to start. That’s because Amazon is selling the latest Kindle Paperwhite Signature Edition in like-new condition for $126.99 ($53 off), which matches the e-reader’s best price to date. If you haven’t purchased a refurbished product from…
Read More
Dangerous Android VPNs are lurking on the Google Play Store. Here are the safe ones that are on sale.
More and more people are turning to VPN apps to boost their privacy and security on their Android devices. Far less, however, realize the potential risk of downloading the wrong one. Google’s latest fraud advisory alert has sounded the alarm about the rising threats of malicious VPN and warned that…
Read More
Leading AI companies keep leaking their own information on GitHub
Researchers find 65% of the Forbes top 50 AI companies are leaking secrets These come in the form of tokens, API keys, and sensitive credentials Wiz used a ‘‘Depth, Perimeter, and Coverage’ approach to spot leaks AI companies have had a pretty rocky history with cybersecurity and data privacy, and…
Read More