loupe

Loupe Loupe es una aplicación para iOS y iPadOS que te ofrece un recorrido práctico por la superficie de huellas digitales del dispositivo. Lee valores reales de las API públicas de iOS, las mismas que cualquier aplicación de terceros puede llamar, y te los muestra en crudo. La idea es simple: ve...

seeker

可用语言 Seeker 背后的概念很简单，就像我们托管钓鱼页面来获取凭证一样，为什么不托管一个虚假页面，请求您的位置权限，就像许多流行的基于位置的网站那样。更多内容请阅读 thewhiteh4t 的博客 。Seeker 托管一个虚假网站，该网站请求位置权限，如果目标允许，我们可以获取： 经度 纬度 精确度 海拔 - 并非总是可用 方向 - 仅在用户移动时可用 速度 - 仅在用户移动时可用 除了位置信息，我们还可以在无需任何权限的情况下获取 设备信息 ： 使用 Canvas 指纹识别的唯一 ID 设备型号 - 并非总是可用 操作系统 平台 CPU 核心数量 - 近似结果 内存大小 - 近似...

CVE-1999-0524-POC

ICMP Timestamp Scanner — CVE-1999-0524 root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ ██╗ ██████╗███╗ ███╗██████╗ ████████╗███████╗ ║ ║ ██║██╔════╝████╗ ████║██╔══██╗ ██╔══╝██╔════╝ ║ ║ ██║██║ ██╔████╔██║██████╔╝ ██║ ███████╗ ║ ║ ██║██║ ██║╚██╔╝██║██╔═══╝ ██...

CVE-2026-84623

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

EUVD-2026-78033

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

CVE-2026-84623

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

CVE-2026-84623

CVE-2026-84623 is an authorization issue in Apple iOS and iPadOS , addressed with improved state management . The vulnerability allows an app to fingerprint the device , representing a privacy-adjacent impact rather than a direct code-execution or privilege-escalation flaw. It was classified by R...

CVE-2026-84623

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

CVE-2026-84623: Improper Authentication

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

PT-2026-91666

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

EUVD-2026-42800

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

CVE-2026-15291

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

CVE-2026-15291

The CVE-2026-15291 entry concerns the WordPress plugin Chat Help – Click to Chat Button & Form, vulnerable in all versions up to and including 3.1.3 due to missing authentication/authorization on REST endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/{id}. Unauthenticated atta...

Fake TikTok Downloaders on Chrome and Edge Spying on 130,000 Users

Over 130,000 users are at risk from fake TikTok downloader extensions on Chrome and Microsoft Edge. Researchers discovered these malicious tools use device fingerprinting to spy on users and steal sensitive browser data...

The n8n n8mare: How threat actors are misusing AI workflow automation

Cisco Talos research has uncovered agentic AI workflow automation platform abuse in emails. Recently, we identified an increase in the number of emails that abuse n8n, one of these platforms, from as early as October 2025 through March 2026. In this blog, Talos provides concrete examples of how...

Criminals are renting virtual phones to bypass bank security

Researchers at Group-IB warn about criminals using virtual Android devices to bypass modern security solutions. Cloud phones are virtual Android devices that can fully mimic real device fingerprints model, hardware, IP, timezone, sensor data, behavior. This allows them to undermine banks’...

CONTEX-T: Contextual Privacy Exploitation Via Transformer Spectral Analysis for IoT Device Fingerprinting

The rapid expansion of internet of things IoT devices have created a pervasive ecosystem where encrypted wireless communications serve as the primary privacy and security protection mechanism. While encryption effectively protects message content, packet metadata and statistics inadvertently expo...

EUVD-2019-3419

Malware in sbrugna...

Rhadamanthys Stealer Evolves: Adds Device Fingerprinting, PNG Steganography Payloads

The threat actor behind Rhadamanthys has also advertised two other tools called Elysium Proxy Bot and Crypt Service on their website, even as the flagship information stealer has been updated to support the ability to collect device and web browser fingerprints, among others. "Rhadamanthys was...

Transformers for Secure Hardware Systems: Applications, Challenges, and Outlook

The rise of hardware-level security threats, such as side-channel attacks, hardware Trojans, and firmware vulnerabilities, demands advanced detection mechanisms that are more intelligent and adaptive. Traditional methods often fall short in addressing the complexity and evasiveness of modern...