Tag

Security Vulnerabilities

All articles tagged with #security vulnerabilities

technology11 days ago•8 min saved

Apple patches iOS 26.6.1, iPadOS 26.6.1 and macOS Tahoe 26.6.2 to fix ~30 vulnerabilities

Apple released iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 to fix nearly 30 vulnerabilities (21 WebKit; 9 OpenAI Codex Security), including kernel flaws, WebKit memory issues, an audio leak, and a telephony flaw that could bypass IPSec. Apple notes fixes were backported to iOS 27/iPadOS 27 and macOS Golden Gate betas. No exploits are known, but updating is advised; older devices can get iOS 18.7.10/iPadOS 18.7.10, and macOS Tahoe patch is available for Macs that can run Tahoe. Install via Settings > General > Software Update.

via MacRumors|

#apple #ios-2661 #macos-tahoe-2662

middle-east1 month ago•16 min saved

Iranian FM narrowly survives Israeli strike, warns of insider security gaps

Iranian Foreign Minister Abbas Araghchi recounts surviving an Israeli strike on a bunker hosting senior officials, describing the devastation and warning of serious security vulnerabilities including possible insider infiltration; he cites precise Israeli intelligence, notes emergency procedures and codes like Code 110, and details diplomatic efforts to prevent further fronts, while indicating Mojtaba Khamenei’s status remains highly secret and that Iran’s strategic gains were unlikely to be undone in the war’s first two weeks.

via The Jerusalem Post|

#abbas-araghchi #intelligence #iran

technology1 month ago•4 min saved

Nearby attackers can crash AirDrop and Quick Share, researchers warn

Researchers disclosed six local flaws in AirDrop and Quick Share that let nearby attackers crash the receiving devices or bypass session checks. Apple and Google have begun patching these flaws (Apple has assigned a CVE; Google fixed the Windows Quick Share bug; Samsung’s issues are under investigation). The exploits are local (about 10–30 meters or on the same LAN) and affect macOS/iOS, Samsung Quick Share, and Windows Quick Share. Users should update to the latest OS and adjust AirDrop to Contacts Only or disable Everyone, and limit Quick Share visibility when not actively receiving.

via The Hacker News|

#airdrop #cross-platform #cve

technology6 months ago•7 min saved

Moltbook: AI Agents, Human Puppeteers, and the Security Frontier

Moltbook, a Reddit-like social network for AI agents from OpenClaw, went viral for AI-like posts, but investigations suggest much content is human-scripted or manipulated; security flaws and impersonation risks could allow attackers to control AI agents or access data, highlighting both potential and peril in AI agent ecosystems.

via The Verge|

#ai-agents #impersonation #moltbook

technology8 months ago•70 min saved

GPG Failure Highlights Security Concerns

The article discusses concerns about GnuPG's security issues, including a significant vulnerability that allows plaintext recovery, and debates whether GPG signatures on git commits are secure or if alternatives like SSH keys or Signal should be used for secure communication and signing. It highlights the complexity and flaws in PGP's design, the challenges of key management, and the political and technical difficulties in replacing or improving upon existing cryptographic tools.

via Hacker News|

#cryptography #digital-signatures #gnupg

technology8 months ago•1 min saved

Experts Warn of Privacy and Safety Risks in AI Toys for Children

A report by Mozilla Foundation and 7ASecurity reveals widespread security and privacy weaknesses in popular internet-connected toys, risking hacking, spying, and data exposure, raising concerns among lawmakers about children's safety and privacy.

via Axios|

#childrens-toys #cybersecurity #internet-toys

technology8 months ago•4 min saved

Outdated Web Browsers in Smart Devices Pose Security Risks

Research from KU Leuven highlights that embedded browsers in devices like smart TVs, e-readers, and gaming applications are often outdated and lack security updates, leaving users vulnerable to cyber threats. Many devices ship with browsers several years behind current versions, and some manufacturers do not provide necessary security patches, raising concerns about device security and regulatory compliance. The study emphasizes the need for regulations to enforce timely updates and security measures for embedded browsers.

via theregister.com|

#device-security #embedded-browsers #outdated-software

technology9 months ago•5 min saved

FFmpeg Demands Funding or Ceases Bug Reports from Google

FFmpeg, a vital open-source multimedia framework used widely across platforms, faces challenges due to underfunding and reliance on volunteers for fixing security vulnerabilities, highlighted by a recent obscure bug found by Google's AI. The debate centers on whether large corporations like Google should provide more support and patches, or if the current volunteer-driven model is sustainable, especially as AI uncovers more security issues. The situation underscores the need for better funding and support for critical open-source projects to ensure their security and longevity.

via The New Stack|

#ffmpeg #google #open-source

technology10 months ago•6 min saved

OpenAI’s ChatGPT Atlas Faces Security Risks Amid Web Enhancements

Cybersecurity experts warn that OpenAI's ChatGPT Atlas, an AI browser with new features like memory and agent mode, faces significant security risks including prompt injection attacks that could lead to data theft, malware downloads, and other malicious activities. Despite mitigation efforts by OpenAI, the attack surface is expanding, raising concerns about privacy, data sharing, and user safety as these AI tools become more integrated into internet browsing.

via Fortune|

#ai-browsers #chatgpt-atlas #openai

technology10 months ago•3 min saved

Apple Increases Bug Bounty to $2 Million for Critical iPhone Security Flaws

Apple is increasing its bug bounty payouts, with some reaching up to $2 million, to incentivize security researchers to find vulnerabilities in iPhones and Macs, especially in new security features like Memory Integrity Enforcement and Lockdown Mode, amid rising threats from spyware and nation-state hackers.

via Axios|

#apple #bug-bounty #cybersecurity

world11 months ago•4 min saved

Cyberattack Causes Major Disruptions at European Airports

A cyberattack targeted check-in and boarding systems at several major European airports, causing delays and disruptions, but was contained with minimal impact on flights; the incident highlighted vulnerabilities in aviation security and reliance on third-party digital systems.

via PBS|

#airports #cyberattack #europe

technology11 months ago•2 min saved

Google Confirms Android Vulnerability Affecting 1 Billion Phones

Google has confirmed that two critical vulnerabilities affecting Android devices are actively exploited in the wild, impacting over a billion phones, with no immediate fix for older devices. Pixel phones will be updated quickly, but many other Android devices may remain vulnerable due to outdated software, emphasizing the need for users to upgrade their devices to stay protected. The vulnerabilities could allow privilege escalation without user interaction, posing significant security risks.

via Forbes|

#android #cybersecurity #google

technology11 months ago•1 min saved

Google Patches 120 Android Flaws, Including Critical Zero-Days

Google has revealed two critical security vulnerabilities affecting Android devices, which are being exploited in the wild. While Pixel phones will be updated immediately, many older devices no longer supported are at risk, highlighting the importance of upgrading to newer models to ensure security. Over half of mobile devices run outdated OS versions, increasing vulnerability to attacks.

via Forbes|

#android #device-update #patches

technology1 year ago•4 min saved

EV Charger Hack Now More Dangerous, Poses Fire Risk

Researchers from Trend Micro demonstrated that hacking EV chargers can cause them to overheat and catch fire, posing a serious safety risk. The vulnerabilities stem from design flaws that allow physical modifications, leading to potential house fires. Experts recommend avoiding coiled cables, using shorter cords, and urging manufacturers to implement hardware-only safety mechanisms to prevent such hazards.

via PCMag|

#ev-chargers #fire-risk #hacking

technology1 year ago•1 min saved

Exploring 5G Signals Using Software-Defined Radio

Researchers from ASSET developed a 5G sniffer and injector using software-defined radios, enabling real-time data capture and potential exploitation of 5G vulnerabilities, including downgrading connections and causing device failures, providing insights into 5G security challenges.

via Hackaday|

#5g #asset-research #security-vulnerabilities