A ransomware group has targeted Foxconn, the major electronics manufacturer, claiming to have stolen 8 terabytes of sensitive data. This data reportedly includes schematics and project details related to key clients like Dell, Google, Apple, and Nvidia. Although Foxconn has not issued a statement about the accuracy of these claims,…
A notable vulnerability has been identified in the widely utilized sudo utility by Joe Vennix from Apple Security. Under certain configurations, this flaw could permit low-privileged users or harmful applications to execute commands with elevated administrative privileges on Linux and macOS operating systems. Sudo, a critical command-line utility, allows users…
A major cybersecurity incident has unfolded involving a 22-year-old man from North London who pleaded guilty to blackmailing tech giant Apple. The suspect claimed to possess access to over 300 million iCloud accounts, leveraging this information as a bargaining chip by demanding a ransom. This case sheds light on the…
On Thursday, Apple announced a series of security updates to address three zero-day vulnerabilities that have been identified as actively exploited in the wild. The patches are part of updates for iOS, iPadOS, macOS, and watchOS, specifically targeting flaws within the FontParser component and kernel. These vulnerabilities could allow attackers…
Recent Security Breaches Underscore Growing Cyber Threats In an alarming series of recent cyber incidents, it has become evident that some of the most significant security breaches often unfold quietly, without immediate alert signals. These breaches usually involve subtle actions that may appear innocuous, highlighting a troubling trend in which…
CISA Adds Two Vulnerabilities in N-able N-central to Its Known Exploited Vulnerabilities Catalog
Aug 14, 2025 | Vulnerability / Network Security
On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included two security flaws affecting N-able N-central in its Known Exploited Vulnerabilities (KEV) catalog, due to evidence of active exploitation. N-able N-central is a Remote Monitoring and Management (RMM) platform tailored for Managed Service Providers (MSPs) to effectively manage and safeguard their clients’ Windows, Apple, and Linux endpoints from a centralized platform.
The identified vulnerabilities are as follows:
Both issues have been resolved in N-central versions 2025.3.1 and 2024.6 HF2, released on August 13, 2025. N-able is also advising customers to ensure multi-factor authentication (MFA) is enabled, particularly for admin accounts.
CISA Adds Two N-able N-central Vulnerabilities to High-Risk Catalog On August 14, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced the inclusion of two significant vulnerabilities related to N-able N-central in its Known Exploited Vulnerabilities (KEV) catalog. This decision comes in response to evidence indicating that these flaws…
CISA Adds Two Vulnerabilities in N-able N-central to Its Known Exploited Vulnerabilities Catalog
Aug 14, 2025 | Vulnerability / Network Security
On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included two security flaws affecting N-able N-central in its Known Exploited Vulnerabilities (KEV) catalog, due to evidence of active exploitation. N-able N-central is a Remote Monitoring and Management (RMM) platform tailored for Managed Service Providers (MSPs) to effectively manage and safeguard their clients’ Windows, Apple, and Linux endpoints from a centralized platform.
The identified vulnerabilities are as follows:
Both issues have been resolved in N-central versions 2025.3.1 and 2024.6 HF2, released on August 13, 2025. N-able is also advising customers to ensure multi-factor authentication (MFA) is enabled, particularly for admin accounts.
March 2, 2021
The popular jailbreaking tool “unc0ver” has received an update that allows it to jailbreak a wide range of iPhone models running iOS versions from 11.0 to 14.3. This update, known as unc0ver v6.0.0, leverages a kernel vulnerability, identified as CVE-2021-1782, which Apple acknowledged was actively exploited as of January. Lead developer Pwn20wnd announced the release on Sunday, emphasizing that the tool can now unlock devices across various iOS versions, including 12.4.9-12.5.1, 13.5.1-13.7, and 14.0-14.3. The vulnerability allows malicious apps to escalate their privileges due to a race condition in the kernel. According to Pwn20wnd, “We wrote our own exploit based on CVE-2021-1782 for #unc0ver to achieve optimal exploit speed and stability.” Apple has since addressed this flaw in its updates for iOS and iPadOS 14.
Updated ‘unc0ver’ Tool Enables Jailbreak for All iPhone Models Running iOS 11.0 to 14.3 On March 2, 2021, the renowned jailbreaking utility known as “unc0ver” received a significant update, allowing it to jailbreak all iPhone models operating on iOS versions from 11.0 to 14.3. This development comes in light of…
March 2, 2021
The popular jailbreaking tool “unc0ver” has received an update that allows it to jailbreak a wide range of iPhone models running iOS versions from 11.0 to 14.3. This update, known as unc0ver v6.0.0, leverages a kernel vulnerability, identified as CVE-2021-1782, which Apple acknowledged was actively exploited as of January. Lead developer Pwn20wnd announced the release on Sunday, emphasizing that the tool can now unlock devices across various iOS versions, including 12.4.9-12.5.1, 13.5.1-13.7, and 14.0-14.3. The vulnerability allows malicious apps to escalate their privileges due to a race condition in the kernel. According to Pwn20wnd, “We wrote our own exploit based on CVE-2021-1782 for #unc0ver to achieve optimal exploit speed and stability.” Apple has since addressed this flaw in its updates for iOS and iPadOS 14.
As the discourse around the implications of advanced AI models on cybersecurity continues, Mozilla announced that it utilized early access to Anthropic’s Mythos Preview to identify and address 271 vulnerabilities in its latest Firefox 150 browser release. Concurrently, researchers have uncovered a group of North Korean hackers who have adeptly…
Apple Issues Critical Security Updates for Zero-Day Vulnerabilities Amid Active Exploits
On May 4, 2021, Apple launched urgent security updates for iOS, macOS, and watchOS to tackle three zero-day vulnerabilities and to enhance protections for a fourth flaw that may have been actively exploited. These vulnerabilities, primarily affecting WebKit—the engine behind Safari and other browsers on iOS—could allow attackers to execute arbitrary code on targeted devices. Here’s a summary of the three security issues:
CVE-2021-30663: An integer overflow vulnerability exploitable via crafted web content, potentially leading to code execution. This was mitigated through improved input validation.
CVE-2021-30665: A memory corruption issue that could be leveraged to create malicious web content, resulting in code execution. This was remedied with enhanced state management.
CVE-2021-30666: A buffer overflow vulnerability that might be exploited to generate malicious web content, leading to…
Apple Issues Critical Security Patches for Zero-Day Vulnerabilities Amid Active Exploits On May 3, 2021, Apple announced the release of a suite of security updates for its operating systems, including iOS, macOS, and watchOS, aimed at addressing several pressing vulnerabilities. Notably, these updates specifically target three zero-day flaws tied to…
Apple Issues Critical Security Updates for Zero-Day Vulnerabilities Amid Active Exploits
On May 4, 2021, Apple launched urgent security updates for iOS, macOS, and watchOS to tackle three zero-day vulnerabilities and to enhance protections for a fourth flaw that may have been actively exploited. These vulnerabilities, primarily affecting WebKit—the engine behind Safari and other browsers on iOS—could allow attackers to execute arbitrary code on targeted devices. Here’s a summary of the three security issues:
CVE-2021-30663: An integer overflow vulnerability exploitable via crafted web content, potentially leading to code execution. This was mitigated through improved input validation.
CVE-2021-30665: A memory corruption issue that could be leveraged to create malicious web content, resulting in code execution. This was remedied with enhanced state management.
CVE-2021-30666: A buffer overflow vulnerability that might be exploited to generate malicious web content, leading to…
