You are here |
theevilbit.github.io | ||
| | | |
www.threatmate.com
|
|
| | | | The DownloadCVE-2025-4664 is a serious zero-day vulnerability in Google Chrome that has been actively exploited in the wild, allowing attackers to hijack user devices through crafted web content. For business owners, MSPs, and IT operators, this poses an immediate and widespread risk-Chrome is one of the most widely used browsers in enterprise environments. A successful exploit could give an attacker access to session tokens, browser-stored credentials, or even control over a device-jeopardizing | |
| | | |
tobert.github.io
|
|
| | | | ||
| | | |
reverse.put.as
|
|
| | | | Today a local privilege escalation vulnerability was disclosed in this blog post. It describes a vulnerability in IOBluetoothFamily kernel extension (IOKit is a never-ending hole of security vulnerabilities). Mavericks and most probably all previous versions are vulnerable but not Yosemite. The reason for this is that Apple silently patched the bug in Yosemite. This is not a new practice, where Apple patches bugs in the latest and newly released OS X version and doesn't care about older versions. | |
| | | |
www.seqrite.com
|
|
| | Seqrite Labs uncovers Silent Lynx, a new APT group targeting government entities in Kyrgyzstan and neighboring nations. This in-depth analysis explores their campaigns, including malicious ISO files, C++ loaders, PowerShell scripts, and Golang implants, leveraging Telegram for command and control. |