vulnerability - Page 8

Xiaomi Smartwatch Vulnerability Exposed: Hacking PIN Coordinates Using Touch Points

Posted: June 19, 2025

Categories: Hacking, vulnerability

Tags: xiaomi smartwatch vulnerability, wearable technology, sergei volokitin, security tokens, remote access vulnerabilities, pin hacking, hardware security, hard pwn event, cybersecurity conference, consumer electronics security

Author: Npav Lab

Security researcher Sergei Volokitin exposes vulnerabilities in Xiaomi devices, including the S3 smartwatch, at the Hard Pwn conference. Learn about the risks and the importance of hardware security.

Urgent Chrome Update: Critical Vulnerabilities Allow Arbitrary Code Execution

Posted: June 18, 2025

Categories: Google, vulnerability

Tags: v8 engine, user safety, use-after-free, security vulnerabilities, google security, cve-2025-6192, cve-2025-6191, chrome update, browser update, arbitrary code execution

Author: Npav Lab

Google has released an urgent update for Chrome to address critical vulnerabilities that allow arbitrary code execution. Users must update immediately to ensure their security.

Critical IBM Backup Services Vulnerability Allows Privilege Escalation for Attackers

Posted: June 16, 2025

Categories: Cyber Attack, Data Backup, vulnerability

Tags: unqualified library call, security flaw, program temporary fixes, privilege escalation, ibm i platform, ibm backup services vulnerability, enterprise security, cyber security, cve-2025-33108

Author: Npav Lab

A serious vulnerability in IBM Backup, Recovery, and Media Services (CVE-2025-33108) could allow attackers to escalate privileges and execute malicious code. Learn about the risks and mitigation steps.

Vulnerability in KIA Ecuador Keyless Entry Systems Poses Theft Risk for Thousands of Vehicles

Posted: June 16, 2025

Categories: Other, Security, vulnerability

Tags: vehicle security, rolling code systems, learning code technology, latin america vehicle security, kia ecuador vulnerability, keyless entry theft risk, cve-2025-6029, autorfkiller, automotive vulnerabilities

Author: Npav Lab

A significant security vulnerability (CVE-2025-6029) in KIA Ecuador's keyless entry systems exposes thousands of vehicles to theft. Learn about the risks, attack methods, and recommendations for consumers.

Security Breach Alert: Indian Government Warns of Vulnerabilities in MediaTek-Powered Devices

Posted: June 12, 2025

Categories: Security, Data Breach, vulnerability

Tags: wi-fi routers, tablets, smartphones, smart tvs, security patches, security breach alert, mediatek vulnerabilities, laptops, device security, denial-of-service, data theft, cve-2025-20673, cve-2025-20672, cert-in advisory

Author: Npav Lab

The Indian government has issued a high-severity alert regarding vulnerabilities in devices using MediaTek processors. Learn about affected devices, security risks, and recommended actions.

Critical Windows Remote Desktop Services Vulnerability CVE-2025-32710 Allows Remote Code Execution

Posted: June 12, 2025

Categories: vulnerability, Windows

Tags: windows server updates, windows remote desktop services, use-after-free vulnerability, system compromise, security vulnerability, remote code execution, race condition, microsoft security patch, endpoint protection, cve-2025-32710

Author: Npav Lab

A critical vulnerability in Windows Remote Desktop Services (CVE-2025-32710) enables unauthorized remote code execution. Learn about affected systems, security updates, and mitigation strategies.

Adobe Releases Security Update Fixing 254 Vulnerabilities in AEM and Other Products

Posted: June 11, 2025

Categories: Security, Products, Updates, vulnerability

Tags: xss vulnerabilities, vulnerabilities, substance 3d sampler, software security, privilege escalation, magento open source, cve-2025-47110, cross-site scripting, code execution flaws, aem vulnerabilities, adobe security update, adobe incopy, adobe experience manager, adobe commerce

Author: Npav Lab

Adobe has issued a security update addressing 254 vulnerabilities, primarily affecting Adobe Experience Manager. Learn about the critical flaws and how to protect your software.

FIN6 Leverages Fake LinkedIn Resumes & AWS to Spread More_eggs Malware

Posted: June 11, 2025

Categories: Ransomware, Malware Alerts, Cyber Attack, vulnerability, LinkedIn

Tags: recruiters, phishing campaign, malware via linkedin, malware, linkedin resumes, fin6, aws

Author: Npav Lab

FIN6 cybercrime group uses fake resumes hosted on AWS to deliver More_eggs malware via LinkedIn. Learn how they target recruiters and evade detection.

Google Account Recovery Vulnerability Exposes Users' Phone Numbers to Attackers

Posted: June 10, 2025

Categories: Google, Cyber Attack, Data Breach, Browser Hijack, vulnerability

Tags: user data protection, phone number exposure, legacy system vulnerabilities, google security breach, google account recovery vulnerability, cybersecurity threats, cve google security flaw, brute-force attack on google

Author: Npav Lab

Learn about a critical vulnerability in Google's account recovery system that allowed attackers to access any user's phone number through a brute-force attack, highlighting the importance of security audits for legacy systems.

Wazuh Server Vulnerability Exploited by Two Distinct Botnets for Mirai-Based DDoS Attacks

Posted: June 10, 2025

Categories: Security, Cyber Attack, Botnet, vulnerability, DDoS

Tags: wazuh server vulnerability, remote code execution vulnerabilities, mirai botnet attacks, iot security vulnerabilities, ddos attacks, cybersecurity threats, cve-2025-24016, botnet exploitation

Author: Npav Lab

Discover how two separate botnets exploit the critical Wazuh Server vulnerability (CVE-2025-24016) to launch Mirai-based DDoS attacks, targeting IoT devices and highlighting the urgency of cybersecurity measures.