Tech World

12/07/2025

26/06/2025

06/05/2025

𝗪𝗼𝗿𝗺𝗮𝗯𝗹𝗲 𝗭𝗲𝗿𝗼-𝗖𝗹𝗶𝗰𝗸 𝗥𝗖𝗘 𝘃𝗶𝗮 𝗔𝗽𝗽𝗹𝗲 𝗔𝗶𝗿𝗣𝗹𝗮𝘆

Critical AirPlay flaws (dubbed AirBorne) allow attackers to hijack Apple devices — no click needed.

𝗜𝗳 𝘆𝗼𝘂'𝗿𝗲 𝗼𝗻 𝘁𝗵𝗲 𝘀𝗮𝗺𝗲 𝗪𝗶-𝗙𝗶, 𝘆𝗼𝘂'𝗿𝗲 𝗮 𝘁𝗮𝗿𝗴𝗲𝘁.

𝗪𝗵𝗮𝘁’𝘀 𝗴𝗼𝗶𝗻𝗴 𝗼𝗻?
CVE-2025-24252 + CVE-2025-24132 can be chained for remote code ex*****on (RCE) across Macs, iPhones, TVs, and AirPlay-enabled speakers.
No interaction. No warning. Just being connected is enough.

𝗪𝗵𝘆 𝗶𝘁 𝗺𝗮𝘁𝘁𝗲𝗿𝘀 :
• Zero-click RCE
• Wormable (spreads inside networks)
• File access + info disclosure
• MITM + ACL bypass
• Complete device takeover

🛡️ 𝗪𝗵𝗮𝘁 𝘁𝗼 𝗱𝗼 :
• Update affected devices ASAP
→ iOS 18.4
→ macOS Sequoia 15.4
→ macOS Ventura 13.7.5
→ tvOS 18.4
→ Any device using AirPlay SDK

⚠️ If AirPlay is set to “Everyone” or “Same network,” you’re wide open.
Turn it off or limit it — now.
-

28/04/2025

Cybercriminals are now using a kit called Session Shark.

It's phishing-as-a-service built to bypass Office 365 MFA.

•Steals session tokens to defeat MFA
•Adversary-in-the-middle (AiTM) attack kit
•Advanced antibot detection evasion
•Cloudflare proxy support for stealth hosting
•High-fidelity Office 365 phishing pages
•Instant credential/session exfil via Telegram bots
•Subscription model with "ethical hacking" framing