Magánszemélyeknek

Updates have been released by Mozilla to resolve a pair of critical out-of-bounds access flaws impacting the Firefox browser, which have been abused as zero-days at last week's Pwn2Own Berlin hacking contest, resulting in bounties of $50,000 each for Palo Alto Networks' Edouard Bochin and Tao Yan, as well as security researcher Manfred Paul, according to The Hacker News.

Widely used WordPress plugin RomethemeKit for Elementor was discovered to be affected by a critical security vulnerability, tracked as CVE-2025-30911, which could be leveraged to facilitate remote code execution, Infosecurity Magazine reports.

TechCrunch reports that operations of the almost identical mobile surveillance apps Cocospy, Spyzie, and Spyic have been halted.

Arbitrary file upload is made possible by a missing file type validation.