Aggregator

Elon Musk-owned xAI is testing Grok 4.20, a small update to Grok 4, which already competes with GPT-5 in some benchmarks, such as ARC-AGI 2. [...]

Matter is built on the idea that smart home devices should be secure, reliable, and easy to use. It is based on Internet Protocol (IP), which allows devices, mobile apps, and cloud services to communicate. Matter also defines a set of IP-based networking technologies for device certification. The new update, Matter 1.4.2, strengthens the standard by adding improvements in security, certification, infrastructure, and coordination between different parts of the ecosystem. These changes are informed by … More →

The post What the Matter 1.4.2 update means for smart home security appeared first on Help Net Security.

In early August 2025, cybersecurity teams in Türkiye observed a new, highly evasive Java‐based loader that slipped past every public sandbox, antivirus solution, and even enterprise EDR/XDR platforms. This threat—codenamed SoupDealer—surfaced as a phishing campaign distributing a three‐stage loader via files such as TEKLIFALINACAKURUNLER.jar. Deployed through targeted spearphishing, the initial .jar file only unpacks its […]

The post SoupDealer Malware Bypasses Every Sandbox, AV’s and EDR/XDR in Real-World Incidents appeared first on Cyber Security News.

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Wearables and classified as problematic. This issue affects some unknown processing of the component ADSP. The manipulation leads to buffer over-read. The identification of this vulnerability is CVE-2024-33067. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WBC and Snapdragon Wired Infrastructure and Networking and classified as critical. This vulnerability affects unknown code of the component Management Frame Handler. The manipulation leads to buffer over-read. This vulnerability was named CVE-2024-49839. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MDM, Snapdragon Mobile, Snapdragon WBC and Snapdragon Wearables. This affects an unknown part of the component UE. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2024-38426. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Technology, Snapdragon Voice & Music, Snapdragon WBC and Snapdragon Wearables and classified as critical. This vulnerability affects unknown code of the component Widevine. The manipulation leads to improper authorization. This vulnerability was named CVE-2024-43051. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MDM, Snapdragon Mobile, Snapdragon Technology, Snapdragon WBC and Snapdragon Wearables and classified as problematic. This issue affects some unknown processing of the component Hypervisor. The manipulation leads to buffer over-read. The identification of this vulnerability is CVE-2024-43056. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WBC and Snapdragon Wearables. Affected is an unknown function. The manipulation leads to use after free. This vulnerability is traded as CVE-2025-21424. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in thomstark File Away Plugin up to 3.9.9.0.1 on WordPress. This affects the function Upload. The manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2025-2512. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in thomstark File Away Plugin up to 3.9.9.0.1 on WordPress. Affected is the function ajax. The manipulation leads to risky cryptographic algorithm. This vulnerability is traded as CVE-2025-2539. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in WP Compress Plugin up to 6.20.13 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-47384. The attack can be launched remotely. There is no exploit available.

Native phishing turns trusted tools into attack delivery systems. Varonis shows how attackers weaponize Microsoft 365 apps, like OneNote & OneDrive, to send convincing internal lures and how to spot them before they spread. [...]

根据发表在《The American Journal of Clinical Nutrition》期刊上的一项研究，素食者罹患癌症的风险比肉食者低 12%，纯素食者罹患癌症的风险比肉食者低 24%。研究使用了始于 2002-2007 年的 Adventist Health Study 数据，涉及到 95,863 名北美基督复临安息日会信徒，有 79,468 名信徒最初未患有癌症。基督复临安息日会是基督新教教派之一，推崇素食饮食。结果显示，相比肉食者，素食者整体癌症风险低约 12%，中等发病率癌症的风险降低约 18%。素食者患乳腺癌、结直肠癌、前列腺癌、胃癌和淋巴增生性癌症的风险较低。

In a statement on Monday, Finland’s National Prosecution Authority said they had brought aggravated criminal mischief and aggravated interference with communications charges against the three senior officers aboard the Eagle S, a tanker registered in the Cook Islands.

A vulnerability was found in User Language Switch Plugin up to 1.6.10 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-49064. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in WP-jScrollPane Plugin up to 2.0.3 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-49062. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Porn Videos Embed Plugin up to 0.9.1 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-49061. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Cost Calculator Plugin up to 7.4 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-54046. It is possible to initiate the attack remotely. There is no exploit available.