Urdu-speaking users of the Gilgit-Baltistan regional news website have been targeted by a Android spyware called Kamran. This undocumented spyware prompts users to install an Android app with data harvesting features from the site. Users’ contacts, call logs, location, files, texts and other sensitive data are collected and uploaded to a server hosted on Firebase.
Hard-coded credentials found in Moxa industrial security appliances, routers (CVE-2025-6950)
Moxa has fixed 5 vulnerabilities in its industrial network security appliances and routers, including a remotely exploitable flaw (CVE-2025-6950) that may result in complete system
