Remove 2025 Remove Spyware Remove Surveillance
article thumbnail

Apple fixed the first actively exploited zero-day of 2025

Security Affairs

Apple addressed the first zero-day vulnerability of 2025, which is actively exploited in attacks in the wild aimed at iPhone users. Apple released security updates to address 2025’s first zero-day vulnerability, tracked as CVE-2025-24085 , actively exploited in attacks targeting iPhone users.

Spyware 124
article thumbnail

WhatsApp fixed a spoofing flaw that could enable Remote Code Execution

Security Affairs

WhatsApp addressed a flaw, tracked as CVE-2025-30401, that could allow attackers to trick users and enable remote code execution. WhatsApp released a security update to address a vulnerability, tracked as CVE-2025-30401, that could let attackers trick users and enable remote code execution.

Spyware 120
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

A flaw in Catwatchful spyware exposed logins of +62,000 users

Security Affairs

A flaw in Catwatchful spyware exposed logins of 62,000 users, turning the spy tool into a data leak, security researcher Eric Daigle revealed. A flaw in the Catwatchful Android spyware exposed its full user database, leaking email addresses and plaintext passwords of both customers and its admin, TechCrunch first reported.

Spyware 81
article thumbnail

Privacy Roundup: Week 12 of Year 2025

Security Boulevard

This is a news item roundup of privacy or privacy-related news items for 16 MAR 2025 - 22 MAR 2025. Surveillance Tech in the News This section covers surveillance technology and methods in the news. The post Privacy Roundup: Week 12 of Year 2025 appeared first on Security Boulevard.

article thumbnail

The U.S. House banned WhatsApp on government devices due to security concerns

Security Affairs

link] — Andy Stone (@andymstone) June 23, 2025 Stone noted WhatsApp messages are end-to-end encrypted by default, providing stronger security than most apps on the CAO’s approved list, which lack this protection. The House has banned other apps as well, including TikTok, OpenAI ChatGPT, and DeepSeek.

article thumbnail

Serbian student activist’s phone hacked using Cellebrite zero-day exploit

Security Affairs

In a statement published on 25 February 2025, Cellebrite announced that it had blocked Serbia from using its solution after reports that police used it to unlock and infect the phones of a journalist and activist. CVE-2024-53104 was patched in Androids February 2025 update, while CVE-2024-53197 and CVE-2024-50302 (CVSS score of 5.5)

Hacking 72
article thumbnail

U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

Cybersecurity and Infrastructure Security Agency (CISA) added Apple Multiple Products Use-After-Free Vulnerability, tracked as CVE-2025-24085 ,to its Known Exploited Vulnerabilities (KEV) catalog. Usually, such kinds of vulnerabilities are exploited by nation-state actors or commercial surveillance spyware vendors in targeted attacks.

Spyware 61