CVE-2025-43274

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2025-43274

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2025-43274

The CVE-2025-43274 entry concerns macOS Sequoia where a privacy issue allowed a sandboxed process to bypass sandbox restrictions. Apple fixed it in Sequoia 15.6 by removing the vulnerable code. The vulnerability is described as a sandbox bypass with local impact, and the public records confirm th...

CVE-2025-50738

The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be...

Age Verification Laws Send VPN Use Soaring—and Threaten the Open Internet

A law requiring UK internet users to verify their age to access adult content has led to a huge surge in VPN downloads—and has experts worried about the future of free expression online...

PT-2025-31301

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.6 iPadOS versions prior to 17.7.9 iPadOS versions prior to 18.6 Description Privacy Indicators for microphone or camera access may not be correctly displayed. The issue was addressed by adding additional logic...

PT-2025-31338 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A privacy issue was addressed by removing the vulnerable code. A sandboxed process may be able to circumvent sandbox restrictions. Recommendations: Update to macOS version 15.6...

PT-2025-31231 · Apple · Macos Ventura +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 macOS Sequoia versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. An app may be able to bypass certain Privacy...

ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models

Machine unlearning MU removes specific data points or concepts from deep learning models to enhance privacy and prevent sensitive content generation. Adversarial prompts can exploit unlearned models to generate content containing removed concepts, posing a significant security risk. However,...

Benchmarking Fraud Detectors on Private Graph Data

We introduce the novel problem of benchmarking fraud detectors on private graph-structured data. Currently, many types of fraud are managed in part by automated detection algorithms that operate over graphs. We consider the scenario where a data holder wishes to outsource development of fraud...

Privacy-Preserving Anonymization of System and Network Event Logs Using Salt-Based Hashing and Temporal Noise

System and network event logs are essential for security analytics, threat detection, and operational monitoring. However, these logs often contain Personally Identifiable Information PII, raising significant privacy concerns when shared or analyzed. A key challenge in log anonymization is...

About the security content of iOS 18.6 and iPadOS 18.6

About the security content of iOS 18.6 and iPadOS 18.6 This document describes the security content of iOS 18.6 and iPadOS 18.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of iPadOS 17.7.9

About the security content of iPadOS 17.7.9 This document describes the security content of iPadOS 17.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

macOS Sploitlight Flaw Exposes Apple Intelligence-Cached Data to Attackers

macOS flaw dubbed Sploitlight allows attackers to access Apple Intelligence-cached data by abusing Spotlight plugins, bypassing privacy controls...

Tea App Breach: Women Only Dating Platform Leaks 72K User Images

The "Tea" app, a new and popular social platform for women, confirmed a major data breach affecting users…...

Next-Generation Quantum Neural Networks: Enhancing Efficiency, Security, and Privacy

This paper provides an integrated perspective on addressing key challenges in developing reliable and secure Quantum Neural Networks QNNs in the Noisy Intermediate-Scale Quantum NISQ era. In this paper, we present an integrated framework that leverages and combines existing approaches to enhance...

Security Loophole in Error Verification in Quantum Key Distribution

The security of quantum key distribution QKD is evaluated based on the secrecy of Alice's key and the correctness of the keys held by Alice and Bob. A practical method for ensuring correctness is known as error verification, in which Alice and Bob reveal a portion of their reconciled keys and che...

Collusion Resistant DNS with Private Information Retrieval

There has been a growing interest in Internet user privacy, demonstrated by the popularity of privacy-preserving products such as Telegram and Brave, and the widespread adoption of HTTPS. The Domain Name System DNS is a key component of Internet-based communication and its privacy has been...

ModShift: Model Privacy Via Designed Shifts

In this paper, shifts are introduced to preserve model privacy against an eavesdropper in federated learning. Model learning is treated as a parameter estimation problem. This perspective allows us to derive the Fisher Information matrix of the model updates from the shifted updates and drive the...

Malicious code in prof-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f83d01100c725673d7685ad3e206d71bb2f18d371a452cd2927d1391ec02cf4 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...