514 matches found
iPhone users in 98 countries warned about spyware by Apple
In April 2024, we reported how Apple was warning people of mercenary attacks via its threat notification system. At the time it warned users in 92 countries. In a new round, Apple is now warning users in 98 countries of potential mercenary spyware attacks. The message sent to the affected users...
Apple Removes VPN Apps from Russian App Store Amid Government Pressure
Apple removed a number of virtual private network VPN apps in Russia from its App Store on July 4, 2024, following a request by Russia's state communications watchdog Roskomnadzor, Russian news media reported. This includes the mobile apps of 25 VPN service providers, including Hidemy.name VPN, L...
About the security content of macOS Monterey 12.7.5
About the security content of macOS Monterey 12.7.5 This document describes the security content of macOS Monterey 12.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Android Malware Wpeeper Uses Compromised WordPress Sites to Hide C2 Servers
Cybersecurity researchers have discovered a previously undocumented malware targeting Android devices that uses compromised WordPress sites as relays for its actual command-and-control C2 servers for detection evasion. The malware, codenamed Wpeeper, is an ELF binary that leverages the HTTPS...
Warning from LastPass as fake app found on Apple App Store
Password Manager LastPass has warned about a fraudulent app called “LassPass Password Manager” which it found on the Apple App Store. The app closely mimics the branding and appearance of LastPass, right down to the interface. So, even if the name was a “happy accident” it seems clear that this w...
Google Starts Blocking Sideloading of Potentially Dangerous Android Apps in Singapore
Google has unveiled a new pilot program in Singapore that aims to prevent users from sideloading certain apps that abuse Android app permissions to read one-time passwords and gather sensitive data. "This enhanced fraud protection will analyze and automatically block the installation of apps that...
Apple warns of “privacy and security threats” after EU requires it to allow sideloading
Despite several warnings about the risks, Apple will allow European iPhone owners to install apps obtained from outside the official App store sideloading. These drastic changes are brought about to comply with the European Union’s EU Digital Markets Act DMA. The Digital Markets Act DMA establish...
CVE-2023-6450
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service...
CVE-2023-6450
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service...
Information disclosure
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service...
CVE-2023-6450
CVE-2023-6450 concerns the Lenovo App Store, where an incorrect permissions vulnerability could allow a local attacker to consume system resources and trigger a denial of service. The publicly referenced metrics indicate a CVSS v3.1 base score of 5.5 (MEDIUM) with a local attack vector, low attac...
CVE-2023-6450
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service...
CVE-2023-6450
An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service...
PT-2024-14959 · Lenovo · Lenovo App Store
Name of the Vulnerable Software and Affected Versions: Lenovo App Store affected versions not specified Description: An incorrect permissions issue was reported in the Lenovo App Store app, allowing an attacker to utilize system resources. This could result in a denial of service. Recommendations...
Lenovo App Store Resource Management Error Vulnerability
Lenovo App Store is a desktop application from the Chinese company Lenovo. The Lenovo App Store suffers from a Resource Management Error vulnerability that stems from the presence of an incorrect privilege vulnerability. An attacker could exploit this vulnerability to use system resources,...
How to construct "Deployment Rules' for the REST API request to add and update the Public APP Store
This document is to record an easier method to construct the field 'Deployment Rules' in the RESTAPI request to add and update the APP in the Public APP Store...
CVE-2022-3611
An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...
CVE-2022-3611
An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...
Information disclosure
An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...