WhatsApp: FreeType-lek gebruikt bij aanvallen met Paragon-spyware

June 20, 2025

WhatsApp: FreeType-lek gebruikt bij aanvallen met Paragon-spyware

Een kwetsbaarheid in FreeType die in maart door Meta werd geopenbaard is gebruikt bij aanvallen met de Graphite-spyware van Paragon Solutions. Dat heeft WhatsApp tegenover SecurityWeek laten weten. Fr …

Published Date:
Jun 20, 2025 (3 hours, 36 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-27363

Source: Read More

Previous ArticleEverything You Need to Know About CVE-2025–3248: Langflow RCE Vulnerability Explained

Next Article TCC Bypass vulnerabilities in two macOS applications

Highlights

CVE-2025-4658 – OpenPubkey/OPKSSH JWS Signature Verification Bypass

May 13, 2025

CVE ID : CVE-2025-4658

Published : May 13, 2025, 5:16 p.m. | 1 hour, 48 minutes ago

Description : Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Representative Line: Brace Yourself

Beyond the Pilot: A Playbook for Enterprise-Scale Agentic AI

GitHub launches MCP Registry to provide central location for trusted servers

MongoDB brings Search and Vector Search to self-managed versions of database

Distribution Release: Security Onion 2.4.180

Distribution Release: Omarchy 3.0.1

Distribution Release: Mauna Linux 25

Distribution Release: SparkyLinux 2025.09

AI Momentum and Perficient’s Inclusion in Analyst Reports – Highlights From 2025 So Far

AI Momentum and Perficient’s Inclusion in Analyst Reports – Highlights From 2025 So Far

Shopping Portal using Python Django & MySQL

Perficient Earns Adobe’s Real-time CDP Specialization

Valve Survey Reveals Slight Retreat in Steam-on-Linux Share

Valve Survey Reveals Slight Retreat in Steam-on-Linux Share

Review: Elecrow’s All-in-one Starter Kit for Pico 2

FOSS Weekly #25.38: GNOME 49 Release, KDE Drama, sudo vs sudo-rs, Local AI on Android and More Linux Stuff

WhatsApp: FreeType-lek gebruikt bij aanvallen met Paragon-spyware

WhatsApp: FreeType-lek gebruikt bij aanvallen met Paragon-spyware

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

CVE-2025-6777 – Food Distributor Site SQL Injection Vulnerability

The Apple Code Signing Handbook

CVE-2025-48080 – Uncanny Owl Uncanny Toolkit for LearnDash Stored Cross-site Scripting

CVE-2024-6914 – WSO2 SOAP Unauthorized Account Takeover Vulnerability

CVE-2025-4658 – OpenPubkey/OPKSSH JWS Signature Verification Bypass

CVE-2025-5657 – PHPGurukul Complaint Management System SQL Injection Vulnerability

CISA warns about actively exploited Broadcom, Commvault vulnerabilities

gplaces is a simple terminal Gemini client

WhatsApp: FreeType-lek gebruikt bij aanvallen met Paragon-spyware

WhatsApp: FreeType-lek gebruikt bij aanvallen met Paragon-spyware

Related Posts