Pixnapping-Attack-on-Android

本文探讨了加密货币存储领域安全威胁的演变，重点关注用于泄露保护数字钱包的私钥和助记词的现代方法。现代加密货币生态系统面临着日益增长的网络攻击威胁，这些攻击旨在窃取作为数字钱包安全基础的私钥和助记词。攻击的复杂性和精密程度逐年提升，不仅利用软件漏洞，还利用现代移动设备的硬件漏洞。除了剪贴板劫持、键盘记录、二维码欺骗以及利用 BIP32/BIP39 钱包实现中的漏洞等传统威胁外，研究人员越来越多地发现窃取智能手机上存储的加密数据的新方法。 2025 年 10 月初，卡内基梅隆大学和几所美国大学的研究人员公布了一项研究成果，在科学界和密码学界引起了轰动。他们在 Android...

EUVD-2025-48561

Malicious code in bottomcentipedez3n npm...

CVE-2025-48561

creationtimestamp| type| source ---|---|--- 2025-10-14 08:32:18+00:00| seen| https://bsky.app/profile/stringsvsatoms.bsky.social/post/3m35cwflqwk2m 2025-10-14 14:42:18+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m35xm2c2re2i 2025-10-15 12:55:42+00:00| seen|...

CVE-2025-48561

In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48561

In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...