vulnerability - Page 4

Critical Notepad++ Vulnerability Exposes Users to System Compromise

Posted: June 24, 2025

Categories: Data Breach, vulnerability

Tags: #vulnerability, #softwaresecurity, #privilegeescalation, #notepadplusplus, #maliciouscode, #cybersecurity, #cve202549144, #binaryplanting

Author: Npav Lab

A critical privilege escalation vulnerability in Notepad++ version 8.8.1 exposes millions of users to system compromise. Learn about the flaw, its implications, and the urgent need for updates.

Tesla Wall Connector Hacked in 18-Minute Attack via Charging Port Vulnerability

Posted: June 20, 2025

Categories: Hacking, vulnerability

Tags: tesla wall connector hack, tesla security measures, pwn2own automotive competition, infostealer malware, firmware downgrade attack, electric vehicle charger security, cybersecurity, charging port vulnerability, arbitrary code execution

Author: Npav Lab

Tesla's Wall Connector was hacked in an 18-minute attack during the Pwn2Own Automotive competition, exposing vulnerabilities in the charging port. Learn about the implications and security measures taken.

Xiaomi Smartwatch Vulnerability Exposed: Hacking PIN Coordinates Using Touch Points

Posted: June 19, 2025

Categories: Hacking, vulnerability

Tags: xiaomi smartwatch vulnerability, wearable technology, sergei volokitin, security tokens, remote access vulnerabilities, pin hacking, hardware security, hard pwn event, cybersecurity conference, consumer electronics security

Author: Npav Lab

Security researcher Sergei Volokitin exposes vulnerabilities in Xiaomi devices, including the S3 smartwatch, at the Hard Pwn conference. Learn about the risks and the importance of hardware security.

Urgent Chrome Update: Critical Vulnerabilities Allow Arbitrary Code Execution

Posted: June 18, 2025

Categories: Google, vulnerability

Tags: v8 engine, user safety, use-after-free, security vulnerabilities, google security, cve-2025-6192, cve-2025-6191, chrome update, browser update, arbitrary code execution

Author: Npav Lab

Google has released an urgent update for Chrome to address critical vulnerabilities that allow arbitrary code execution. Users must update immediately to ensure their security.

Critical IBM Backup Services Vulnerability Allows Privilege Escalation for Attackers

Posted: June 16, 2025

Categories: Cyber Attack, Data Backup, vulnerability

Tags: unqualified library call, security flaw, program temporary fixes, privilege escalation, ibm i platform, ibm backup services vulnerability, enterprise security, cyber security, cve-2025-33108

Author: Npav Lab

A serious vulnerability in IBM Backup, Recovery, and Media Services (CVE-2025-33108) could allow attackers to escalate privileges and execute malicious code. Learn about the risks and mitigation steps.

Vulnerability in KIA Ecuador Keyless Entry Systems Poses Theft Risk for Thousands of Vehicles

Posted: June 16, 2025

Categories: Other, Security, vulnerability

Tags: vehicle security, rolling code systems, learning code technology, latin america vehicle security, kia ecuador vulnerability, keyless entry theft risk, cve-2025-6029, autorfkiller, automotive vulnerabilities

Author: Npav Lab

A significant security vulnerability (CVE-2025-6029) in KIA Ecuador's keyless entry systems exposes thousands of vehicles to theft. Learn about the risks, attack methods, and recommendations for consumers.

Security Breach Alert: Indian Government Warns of Vulnerabilities in MediaTek-Powered Devices

Posted: June 12, 2025

Categories: Security, Data Breach, vulnerability

Tags: wi-fi routers, tablets, smartphones, smart tvs, security patches, security breach alert, mediatek vulnerabilities, laptops, device security, denial-of-service, data theft, cve-2025-20673, cve-2025-20672, cert-in advisory

Author: Npav Lab

The Indian government has issued a high-severity alert regarding vulnerabilities in devices using MediaTek processors. Learn about affected devices, security risks, and recommended actions.

Critical Windows Remote Desktop Services Vulnerability CVE-2025-32710 Allows Remote Code Execution

Posted: June 12, 2025

Categories: vulnerability, Windows

Tags: windows server updates, windows remote desktop services, use-after-free vulnerability, system compromise, security vulnerability, remote code execution, race condition, microsoft security patch, endpoint protection, cve-2025-32710

Author: Npav Lab

A critical vulnerability in Windows Remote Desktop Services (CVE-2025-32710) enables unauthorized remote code execution. Learn about affected systems, security updates, and mitigation strategies.

Adobe Releases Security Update Fixing 254 Vulnerabilities in AEM and Other Products

Posted: June 11, 2025

Categories: Security, Products, Updates, vulnerability

Tags: xss vulnerabilities, vulnerabilities, substance 3d sampler, software security, privilege escalation, magento open source, cve-2025-47110, cross-site scripting, code execution flaws, aem vulnerabilities, adobe security update, adobe incopy, adobe experience manager, adobe commerce

Author: Npav Lab

Adobe has issued a security update addressing 254 vulnerabilities, primarily affecting Adobe Experience Manager. Learn about the critical flaws and how to protect your software.

FIN6 Leverages Fake LinkedIn Resumes & AWS to Spread More_eggs Malware

Posted: June 11, 2025

Categories: Ransomware, Malware Alerts, Cyber Attack, vulnerability, LinkedIn

Tags: recruiters, phishing campaign, malware via linkedin, malware, linkedin resumes, fin6, aws

Author: Npav Lab

FIN6 cybercrime group uses fake resumes hosted on AWS to deliver More_eggs malware via LinkedIn. Learn how they target recruiters and evade detection.