Apple and Google have removed 20 apps infected with the data-stealing SparkCat malware from their app stores. The malware has been in operation since March 2024, using seemingly harmless food delivery services to target its victims and steal crypto wallet data. The infected apps had been downloaded 242,000 times.

IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,