Tag: iOS | Unpatched Intel

Patch nowExploitedKEVhighAPT / Nation-StateNew

APT29 deploys mobile exploit kits via hijacked analytics and watering holes

APT29-linked actors are using hacked websites, lookalike proxy domains and a hijacked analytics script to push mobile exploit chains to iOS and Android users. The zero-click browser exploits steal cookies, passwords and, on iOS 18.5, full device data. Every flaw in the chains is already patched, so update iOS, Android and Chrome now.

CVE-2025-43529CVE-2026-3910CVE-2026-207005 Nov 20262 min

MonitormediumExploited VulnerabilitiesNew

Attackers can execute remote commands on Cisco 871 routers via CSRF flaw

Cisco has a critical cross-site request forgery (CSRF) flaw in the HTTP Administration component of its IOS software. Attackers can trigger remote command execution by tricking an authenticated administrator into visiting a malicious webpage. Patch your Cisco 871 Integrated Services Routers immediately.

CVE-2008-412814 Jul 20262 min