Aggregator

Apple has disseminated urgent security remediations to neutralize a zero-day vulnerability already weaponized in targeted offensives against select

The post Spyware Alert: Apple Fixes Critical Zero-Day CVE-2026-20700 Exploited in “Sophisticated” Attacks appeared first on Penetration Testing Tools.

Microsoft has formally inaugurated the deployment of Windows 11 26H1, yet the corporation has accompanied this release with

The post Selective Sovereignty: Windows 11 26H1 Debuts for Snapdragon X2 While Purging Legacy Roots appeared first on Penetration Testing Tools.

一款名为 ZeroDayRAT 的新型移动间谍软件平台正在 Telegram 上公开销售，该平台于 2026 年 2 月 2 日首次被捕获，无技术使用门槛，可让不同技术能力的攻击者，对 iOS 和 Android 用户发起隐蔽的恶意攻击。 https://iverify.io/blog/breaking-down-zerodayrat---new-spyware-targeting-android-and-ios 该间谍软件的开发商搭建了专属的销售、客户支持和版本定期更新渠道，为买家提供一站式入口，可直接访问功能齐全的间谍软件管控面板，实现对目标 Android 或 iOS 设备的完全远程控制。 系统适配范围：覆盖 Android 5 至 Android 16 全版本，以及 iOS 26 系统（含 iPhone 17 Pro 机型）。苹果修复动态链接器漏洞：曾被用于针对特定个人的极其复杂攻击 攻击者需将恶意二进制文件（Android 端为 APK 安装包、iOS 端为对应攻击载荷）植入目标设备，最核心的攻击途径为短信钓鱼：受害者点击短信内的链接，下载并安装伪装成合法应用的恶意程序。 此外，钓鱼邮件、虚假应用商店，以及通过 WhatsApp、Telegram 分享的恶意链接，均为有效的感染渠道。 设备感染后，攻击者可通过管控面板的概览页，一站式获取目标设备型号、操作系统版本、电池电量、所属国家 / 地区、锁定状态、SIM 卡与运营商信息、双卡手机号码、分时段应用使用情况、实时活动时间线、近期短信预览等数据，足以完整勾勒受害者的社交对象、高频应用、活跃时段、所处网络等个人画像，还可直接查看截获的银行、运营商及个人联系人的相关信息。 实时提取 GPS 坐标，通过内嵌谷歌地图展示位置轨迹，同步掌握受害者当前位置与历史行踪； 单独抓取设备所有通知，涵盖 WhatsApp、Instagram、Telegram、YouTube 平台消息、未接来电及系统事件，攻击者无需打开对应应用，即可被动获取手机几乎全部活动信息； 完整列示设备内所有注册账户及对应的用户名、邮箱地址，为攻击者实施账户接管、定向社会工程学攻击提供完整素材。 攻击者可通过监控面板，对目标设备实现实时物理访问，包括摄像头实时直播、屏幕录制、麦克风实时监听；结合 GPS 追踪能力，可同步完成对目标的观察、监听与位置定位。 可捕获受害者每一次按键输入，同步记录对应应用上下文与毫秒级时间戳，搭配面板右侧的实时屏幕预览，攻击者可同步掌握目标的操作行为与输入内容； 黑鸟祝大家，新春快乐！

New phishing campaign dubbed Operation DoppelBrand targeted major financial firms like Wells Fargo

Over a billion Android aficionados find themselves within a perilous proximity to cyber threats, with a vast multitude

The post The Billion-Device Blind Spot: Why 40% of Android Users are Now “Sitting Ducks” for Hackers appeared first on Penetration Testing Tools.

A vulnerability classified as critical was found in Linux Kernel up to 6.12.22/6.13.10/6.14.1. The impacted element is the function is_copy_from_user of the component mce. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2025-39989. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.14.1. It has been classified as problematic. Affected by this issue is the function graph_util_parse_dai of the component ASoC. Performing a manipulation results in privilege escalation. This vulnerability is known as CVE-2025-39930. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.12.22/6.13.10/6.14.1. This impacts the function nvmet_ctrl_state_show. The manipulation of the argument csts_state_names[] leads to out-of-bounds read. This vulnerability is listed as CVE-2025-39778. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.13.10/6.14.1. This affects the function pcmcia_driver. Executing a manipulation can lead to improper initialization. This vulnerability is tracked as CVE-2025-39755. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability has been found in Linux Kernel up to 6.14.1 and classified as problematic. Affected is the function ea_get of the component jfs. This manipulation causes out-of-bounds read. This vulnerability appears as CVE-2025-39735. The attacker needs to be present on the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.14.1. The impacted element is the function samsung_clk_init. Performing a manipulation results in improper validation of array index. This vulnerability is identified as CVE-2025-39728. The attack can only be performed from the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.22/6.13.10/6.14.1. The affected element is the function nfs4_lookup_stateid. Such manipulation leads to state issue. This vulnerability is referenced as CVE-2025-39688. The attack needs to be initiated within the local network. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.12.22/6.13.10/6.14.1. It has been rated as problematic. This vulnerability affects unknown code of the component fsl-edma. The manipulation leads to state issue. This vulnerability is uniquely identified as CVE-2025-38479. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is advised.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.14.1. Impacted is the function aead_request_free. This manipulation causes use after free. The identification of this vulnerability is CVE-2025-38575. The attack needs to be done within the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.14.1. The affected element is an unknown function of the component net_sched. Performing a manipulation results in reachable assertion. This vulnerability is cataloged as CVE-2025-38637. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.13.10/6.14.1. This vulnerability affects the function amdgpu_virt_rlcg_reg_rw of the component RLCG Interface. The manipulation results in race condition. This vulnerability is identified as CVE-2025-38104. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.6.86/6.12.22/6.13.10/6.14.1. Impacted is the function mtk_dp_wait_hpd_asserted of the component mediatek. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2025-38240. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.14.1. This issue affects the function table_sz of the component remoteproc. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-2025-38152. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.22/6.13.10/6.14.1. This impacts the function dom_data_init of the component resctrl. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2025-38049. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

Эпоха цифрового пацифизма официально канула в Лету.