fp-5c

iOS 26 Deletes Spyware Evidence by Overwriting Shutdown Logs

Posted: October 28, 2025

Categories: Spyware

Tags: fp-5c, fp-5b, fp-2e, fp-2c, fp-2b, fp-2a, fp-1b

Author: Npav Lab

iOS 26 overwrites shutdown.log, erasing Pegasus traces—learn about the impact on forensics and tips to protect against spyware threats.

7-Zip Vulnerabilities: PoC Exploit Enables Remote Code Execution

Posted: October 18, 2025

Categories: vulnerability

Tags: fp-5c, fp-5b, fp-1b, fp-1a

Author: Npav Lab

CVE-2025-11001 and CVE-2025-11002 in 7-Zip allow code execution via malicious ZIPs—update to v25.00, disable symlinks, and use antivirus to avoid path traversal attacks.

Oracle E-Business Suite CVE-2025-61884: Unauthenticated Hackers Gain Critical Data Access—Patch Immediately

Posted: October 13, 2025

Categories: Data Breach, Hacker

Tags: fp-5c, fp-5b, fp-5a, fp-1b

Author: Npav Lab

High-severity CVE-2025-61884 (CVSS 7.5) in Oracle E-Business Suite's Configurator allows unauthenticated HTTP attacks to access sensitive data (versions 12.2.3-12.2.14). Follows Cl0p-linked CVE-2025-61882 exploits—apply updates, segment networks, and scan for vulnerabilities now.

Google's CodeMender AI: Detects Vulnerabilities and Auto-Rewrites Code for Bulletproof Patches

Posted: October 09, 2025

Categories: Google, vulnerability, AI

Tags: fp-5c, fp-5b, fp-5a, fp-1b, fp-1a

Author: Npav Lab

DeepMind's CodeMender uses Gemini models to spot, patch, and rewrite vulnerable code, upstreaming 72 fixes to OSS projects. Google launches AI VRP for threat reports up to $30K and updates SAIF v2 to combat AI risks like prompt injections—empowering developers against cyber threats.

China-Aligned TA415 Exploits Google Sheets & Calendar for Covert C2 in U.S.-China Espionage Campaign

Posted: September 24, 2025

Categories: Google

Tags: fp-5c, fp-1b

Author: Npav Lab

TA415 (APT41) uses Google Sheets, Calendar, and VS Code Remote Tunnels for stealthy C2 in spearphishing attacks targeting U.S. policy entities on trade/sanctions. From July-August 2025, WhirlCoil loader evades detection; evolve defenses with cloud anomaly monitoring.

N-able N-Central Insecure Deserialization Vulnerability: Risks and Mitigation

Posted: August 14, 2025

Categories: vulnerability

Tags: fp-5c, fp-4b, fp-1b

Author: Npav Lab

A critical insecure deserialization vulnerability in N-able N-Central could allow attackers to execute arbitrary commands. Learn about the risks and recommended actions for organizations.

GitHub Copilot RCE Vulnerability (CVE-2025-53773) Allows Remote Code Execution via Prompt Injection

Posted: August 14, 2025

Categories: vulnerability

Tags: fp-5c, fp-5b, fp-5a, fp-1b

Author: Npav Lab

A critical vulnerability in GitHub Copilot (CVE-2025-53773) enables remote code execution through prompt injection attacks, compromising developers' machines. Learn how this flaw works and its implications.

D-Link DNR-322L Vulnerability: Download of Code Without Integrity Check

Posted: August 07, 2025

Categories: vulnerability

Tags: fp-6e, fp-6d, fp-6c, fp-6b, fp-6a, fp-5c, fp-5b, fp-5a

Author: Npav Lab

Learn about the critical vulnerability in D-Link DNR-322L that allows code downloads without integrity checks. Discover recommended actions to secure your device.