Attack of the clones: Fake ChatGPT apps are everywhere

The mobile AI gold rush has flooded app stores with lookalikes—shiny, convincing apps promising “AI image generation,” “smart chat,” or “instant productivity.” But behind the flashy logos lurks a spectrum of fake apps, from harmless copycats to outright spyware. Spoofing trusted brands like...

Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data

Cybersecurity researchers have shed light on two different Android trojans calledBankBot-YNRK and DeliveryRAT that are capable of harvesting sensitive data from compromised devices. According to CYFIRMA, which analyzed three different samples of BankBot-YNRK, the malware incorporates features to...

About the security content of tvOS 26.1

About the security content of tvOS 26.1 This document describes the security content of tvOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 26.1

About the security content of watchOS 26.1 This document describes the security content of watchOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

CB Project CVLand 安全漏洞

CB Project CVLand is a recruitment mobile application from CB Project Turkey. A security vulnerability exists in CB Project CVLand versions 2.1.0 through 20251103, which stems from a user-controllable key leading to an authorization bypass that could lead to a parameter injection attack...

PT-2025-55367

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.1 Description An access issue exists where a malicious application may be able to access sensitive user data. This is addressed by implementing additional sandbox restrictions, which are security mechanisms tha...

CVE-2025-12596

creationtimestamp| type| source ---|---|--- 2025-11-02 11:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ngfuf4yn2k 2025-11-02 19:22:19+00:00| seen| https://sploitus.com/exploit?id=0743D3EC-B709-5A4C-B8C3-F40F793348C3 2025-11-02 23:00:11+00:00| published-proof-of-concept|...

CVE-2025-12599

creationtimestamp| type| source ---|---|--- 2025-11-01 21:27:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4lwnko5my2q 2025-11-02 03:01:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4mjclaznx2t...

CVE-2025-63561

creationtimestamp| type| source ---|---|--- 2025-10-31 22:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jjabsxux2q...

CVE-2025-63458

creationtimestamp| type| source ---|---|--- 2025-10-31 20:42:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115470719686843436 2025-10-31 21:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4jgkh3jcw2j...

CVE-2025-12507

creationtimestamp| type| source ---|---|--- 2025-10-31 17:45:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4izqoajhs2x...

Chromium: CVE-2025-12439 Inappropriate implementation in App-Bound Encryption

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.17 LTS and 12.17.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality [CVE-2025-59343]

Summary Node.js module tar-fs is used by IBM App Connect Enterprise Certified Container for processing tar files and streams. IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality. This bulletin provides patch information to address the reported...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring, IntegrationRuntime and IntegrationServer operands that use email nodes are vulnerable to loss of confidentiality [GHSA-mm7p-fcc7-pg87]

Summary Node.js module nodemailer is used by IBM App Connect Enterprise Certified Container for processing email in Designer flows that contain an email Node. IBM App Connect Enterprise Certified Container DesignerAuthoring, IntegrationRuntime and IntegrationServer operands that run flows...

Malicious code in dx_auth2_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba4fd977bb9fcc546d31e9a9f84a5339660ae4f841ad226499d9d1e60de893e The package dxauth2app was found to contain malicious code...

SUSE CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-34284

creationtimestamp| type| source ---|---|--- 2025-10-31 00:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h7be7zn72s 2025-10-31 04:31:53+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4hng5xndu27...

CVE-2025-61115

ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...

CVE-2025-61113

TalkTalk 3.3.6 Android App contains improper access control vulnerabilities in multiple API endpoints. By modifying request parameters, attackers may obtain sensitive user information such as device identifiers and birthdays and access private group information, including join credentials...