/
victim_sectors:consumer × criticity:high × limpar

Resultados

3 casos · pág. 1/1

gbhackers.com · high

Midnight Mimosa: Preinstalled Android Firmware Malware Turns Low-Cost Phones into Ad-Fraud Bots and Potential Proxy Nodes

Bitdefender documented Midnight Mimosa, an Android malware campaign that embeds a platform-signed malicious system app in the firmware of low-cost, MediaTek-based handsets and counterfeit flagship models before they reach buyers. Thousands of infected devices were observed in more than 150 countries over roughly two years. The implant dri…

wired.com · · 2 fontes · 2 atualizações high

GhostShares: Meta Muse AI share links expose ~6,800 private chats via passive DNS; Meta suspends sharing

Researchers at Claroc disclosed GhostShares, a design flaw in Meta's Muse AI assistant that lets anyone discover shared conversations through passive DNS. Muse share links use the domain cf.metaaiusercontent.com and embed the conversation title and a random identifier in the hostname. Once a browser resolves the name, passive DNS sensors …

gbhackers.com · high

Broadcom WPS Flaw Lets Nearby Attackers Gain Root RCE on Wi-Fi Routers Without Password; Belgian ISP Devices Unpatched

Researcher Quentin Kaiser (QTNKSR) disclosed a memory corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It allows an unauthenticated attacker within wireless range to disclose memory and execute code, including as root, on vulnerable routers. The attacker does not need the Wi-Fi password, network membership or a co…