3087 matches found
CVE-2025-21019
CVE-2025-21019 : Affected product is Samsung Health; versions prior to 6.30.1.003 suffer improper authorization that can allow a local attacker to access health data. The vulnerability requires user interaction to trigger. Impact is limited to data access within the Samsung Health app; no remote ...
CVE-2025-21019
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability...
CVE-2025-21019
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability...
SAMSUNG Health 安全漏洞
SAMSUNG Health is a health management app from Samsung South Korea. A security vulnerability exists in SAMSUNG Health versions prior to 6.30.1.003, which stems from improper authorization and could lead to a local attacker accessing health data...
PT-2025-32110 · Samsung · Samsung Health
Name of the Vulnerable Software and Affected Versions: Samsung Health versions prior to 6.30.1.003 Description: Improper authorization in Samsung Health allows local attackers to access data within the application. User interaction is required to trigger this issue. Recommendations: Update Samsun...
A week in security (July 28 – August 3)
Last week on Malwarebytes Labs: Apple ID scam leads to $27,000 in-person theft of Ohio man OpenAI kills "short-lived experiment" where ChatGPT chats could be found on Google Trump Administration and Big Tech want you to share your health data Prison visitor details shared with all inmates at...
Trump Administration and Big Tech want you to share your health data
US President Donald Trump announced a loose plan Wednesday to allow Americans to voluntarily upload and port their medical records across hospitals, clinics, technology companies, and health apps, with broad participation from Google, Apple, OpenAI, Amazon, and more. While the system could help...
WordPress MediCenter - Health Medical Clinic <= 15.1 - PHP Object Injection Vulnerability
WordPress MediCenter - Health Medical Clinic = 15.1 - PHP Object Injection Vulnerability discovered by Frank in WordPress Theme MediCenter - Health Medical Clinic versions = 15.1...
National Nuclear Security Administration Systems Breached in SharePoint Cyberattack
National Nuclear Security Administration and National Institutes of Health targeted in global Microsoft SharePoint vulnerability exploitation. Chinese hacking groups suspected in widespread data breaches...
SUSE-SU-2025:02478-1 Security update 5.0.5 for Multi-Linux Manager Server
This update fixes the following issues: server-attestation-image: - Version 5.0.11: Fixed the health check of the container bsc1240604 server-hub-xmlrpc-api-image: - Version 5.0.13: Image rebuilt to the newest version with updated dependencies server-image: - Version 5.0.16: Fixed...
PT-2025-30549 · Undefined · Undefined
@FBI @CISAgov Federal systems remained unpatched against CVE-2025-35824—a critical SharePoint flaw exploited since July 19—when CISA’s emergency directive dropped 72 hours ago. Now the same agencies warning about ransomware can’t secure their own networks storing defense contracts and health...
This is your sign to step away from the keyboard
Welcome to this week's edition of the Threat Source newsletter. Burnout is a real issue for people in cybersecurity. We protect the systems that allow modern life to function. Our hours are long, our sense of responsibility real and occasionally heavy. Everyone notices when we have a bad day and ...
Backscattering-Based Security in Wireless Power Transfer Applied to Battery-Free BLE Sensors
The integration of security and energy efficiency in Internet of Things systems remains a critical challenge, particularly for battery-free and resource-constrained devices. This paper explores the scalability and protocol-agnostic nature of a backscattering-based security mechanism by integratin...
Malicious code in python-uvicorn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5396386b3e45bc2cc83befa80cc1843f6d8374728a22274ffbbc124319ddc16d Malicious copy of uvicorn package with added healthcheck endpoint that exfiltrates application settings/env vars --- Category: MALICIOUS - The campaign has...
Is AI “healthy” to use? (Lock and Code S06E14)
This week on the Lock and Code podcast … “Health” isn’t the first feature that most anyone thinks about when trying out a new technology, but a recent spate of news is forcing the issue when it comes to artificial intelligence AI. In June, The New York Times reported on a group of ChatGPT users w...
Exploring User Security and Privacy Attitudes and Concerns toward the Use of General-Purpose LLM Chatbots for Mental Health
Individuals are increasingly relying on large language model LLM-enabled conversational agents for emotional support. While prior research has examined privacy and security issues in chatbots specifically designed for mental health purposes, these chatbots are overwhelmingly "rule-based" offering...
Bykea: MongoDB Query Logs & Schema Leak via Unauthenticated Endpoint
MongoDB Query Logs & Schema Leak via Unauthenticated Endpoint An unauthenticated health check endpoint was discovered that exposed basic system and infrastructure details...
FBI Warns of Health Insurance Scam Stealing Personal and Medical Data
The Federal Bureau of Investigation FBI has issued a warning about a scam where criminals pretend to be…...
Qilin Ransomware Attack on NHS Causes Patient Death in the UK
A patient's death is confirmed linked to the June 2024 ransomware attack by the Qilin ransomware gang on Synnovis, crippling London's NHS. Learn about the disruptions and Impact...
HARPT: a Corpus for Analyzing Consumers' Trust and Privacy Concerns in Mobile Health Apps
We present HARPT, a large-scale annotated corpus of mobile health app store reviews aimed at advancing research in user privacy and trust. The dataset comprises over 480,000 user reviews labeled into seven categories that capture critical aspects of trust in applications, trust in providers and...