6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

As many as six zero-days have been uncovered in an application called Remote Mouse, allowing a remote attacker to achieve full code execution without any user interaction. The unpatched flaws, collectively named 'Mouse Trap,' were disclosed on Wednesday by security researcher Axel Persinger, who said, "It's clear that this application is very vulnerable and puts users at risk with bad authentication mechanisms, lack of encryption, and poor default configuration."

Really Simple Security Plugin Flaw Risks 4M+ WordPress Sites

An authentication bypass flaw in the Really Simple Security WordPress plugin was fixed with the release 9.1.2, releasing forced patches.

Apple Addressed Two Zero-Day Flaws In Intel-based Macs

Besides releasing the zero-day patches for its Intel-based Macs, Apple also released fixes for its iPhones, iPads, and Apple Vision.

Microsoft To Add Passkey Support With Windows 11

Microsoft introduces support for third-party passkey services with the latest Windows 11 Insider Build, alongside other feature upgrades.

LastPass Warns of Hackers Misusing Reviews for Fake Support Numbers

LastPass, the popular password management service, has issued an urgent warning to its users about an ongoing social engineering campaign targeting customers through fake reviews on the Chrome Web Store.

Tor says it’s "still safe" amid reports of police deanonymizing users

The Tor Project is attempting to assure users that the network is still safe after a recent investigative report warned that law enforcement from Germany and other countries are working together to deanonymize users through timing attacks.

Disney ditching Slack after massive July data breach

The Walt Disney Company is reportedly ditching Slack after a July data breach exposed over 1TB of confidential messages and files posted to the company's internal communication channels.

How to fix CrowdStrike BSOD issue on Windows PCs

A recent update to CrowdStrike's Falcon Sensor for Windows has caused a critical issue, triggering a Blue Screen of Death (BSOD) boot loop on affected systems. This has disrupted thousands of PCs.

Hospitals, banks, media, airlines hit by major IT outage

Cyber-security firm Crowdstrike said its update had caused the problem on computers running Windows.

LastPass users targeted by vishing attackers

The CryptoChameleon phishing kit is being leveraged by vishing attackers looking to trick LastPass users into sharing their master password.

Clorox says cyberattack caused $49 million in expenses

Clorox has confirmed that a September 2023 cyberattack has so far cost the company $49 million in expenses related to the response to the incident.

Check if you're in Google Chrome's third-party cookie phaseout test

Google has started testing the phasing out of third-party cookies on Chrome, affecting about 1% of its users or approximately 30 million people. Learn how to check if you are part of the initial test.

FBI says Chinese state hacker group targeted US infrastructure

China is targeting US infrastructure and laying the groundwork to wreak chaos, the FBI director warns.

Apple Vision Pro isn't trackable via Find My app on another device or iCloud.com

Apple's Vision Pro headset isn't trackable using the Find My app. The only feature it supports is the Activation Lock, which prevents unauthorized people from erasing or resetting the device.

Longer passwords aren't safe from intensive cracking efforts

It’s important to have a password policy that blocks end users from creating weak passwords. But even strong passwords can be compromised.

Serious Vulnerability Spotted In Various Bosch Thermostat Models

Bosch patched the vulnerability, existing due to open port 8899, with latest thermostat firmware releases, urging users to update.

23andMe data breach: Hackers stole raw genotype data, health reports

Genetic testing provider 23andMe confirmed that hackers stole health reports and raw genotype data of customers affected by a credential stuffing attack that went unnoticed for five months, from April 29 to September 27.

Connect: Best Private Messaging & Photo Sharing App for Families

Connect is an exclusive and private messaging and photo sharing app for your closest friends and family members. It's a simple and reliable replacement to Instagram and WhatsApp for the people you truly care about.

Google Chrome Zero-day Exploited in the Wild: Patch Now!

Google has released urgent upgrades to fix the Chrome zero-day high-severity vulnerability that has been widely exploited.

New Instagram Phishing Attack Steals 2FA Backup Codes

A new phishing campaign targeting Instagram users has been discovered which uses several different techniques to lure victims.

NordVPN launches a native VPN app for Apple TV

NordVPN has launched its dedicated VPN app for Apple TV and it's now available for download. The VPN service joins the likes of ExpressVPN and PureVPN, which already have native apps for Apple TV.