Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update
Feb 11, 2025Ravie LakshmananZero-Day / Mobile Security Apple on Monday released out-of-band security updates to address a security flaw in iOS and iPadOS that it…
Month: February 2025
Ubuntu Printing Vulnerability Let Attackers Execute Arbitrary Code on Locked Laptops
A recently discovered vulnerability in Ubuntu 22.04’s printing subsystem, specifically within the “ippusbxd” package, could have allowed attackers to execute arbitrary code on locked laptops.…
Using AI To Help Keep Your Financial Data Secure
Although cybercrime seems woven into the web of society, it still creates significant damage. Many people may not think about any phishing emails they receive…
Apple iOS 0-day Vulnerability Exploited Wild in Extremely Sophisticated Attack
Apple has released emergency security updates to address a zero-day vulnerability, CVE-2025-24200, that has been actively exploited in targeted attacks against iPhone and iPad users.…
Apple: British techies to advise on “devastating” UK global crypto power grab
An obscure British government committee is to be asked this month to advise Home Secretary Yvette Cooper whether to go ahead with government demands that…
Over 12,000 KerioControl firewalls exposed to exploited RCE flaw
Over twelve thousand GFI KerioControl firewall instances are exposed to a critical remote code execution vulnerability tracked as CVE-2024-52875. KerioControl is a network security suite…
Apple fixes iPhone and iPad bug actively exploited in ‘extremely sophisticated attacks’
Apple fixes iPhone and iPad bug exploited in ‘extremely sophisticated attacks’ Pierluigi Paganini February 10, 2025 Apple released iOS and iPadOS updates to address a…
Hackers Exploiting Google Tag Managers to Steal Credit Card from eCommerce Sites
In a concerning development, cybercriminals are leveraging Google Tag Manager (GTM), a legitimate tool widely used by eCommerce websites, to deploy malicious scripts designed to…
NanoCore RAT Attack Windows Using Task Scheduler to Captures keystrokes, screenshots
NanoCore, a notorious Remote Access Trojan (RAT), continues to pose a significant threat to Windows systems. This malware, known for its espionage capabilities and modular…
Microsoft to adjust Office-Teams pricing in bid to avoid EU antitrust fine – Software
Microsoft has offered to widen the price differential between its Office product sold with its chat and video app Teams and its software sold without…
HPE is notifying individuals affected by a December 2023 attack
HPE is notifying individuals affected by a December 2023 attack Pierluigi Paganini February 10, 2025 Hewlett Packard Enterprise (HPE) has begun notifying individuals affected by…
SAML Bypass Authentication on GitHub Enterprise Servers to Login as Other User Account
A severe security vulnerability, tracked as CVE-2025-23369, has been identified in GitHub Enterprise Server (GHES), allowing attackers to bypass SAML authentication and impersonate other user…