Oddbean new post about | logout
 **Recent 0day Threat Intelligence Alert from Darknet**

The Tor Project has released an emergency update for the Tor Browser (version 13.5.7) to address a recently discovered vulnerability, CVE-2024-9680, which has been actively exploited in the wild. The vulnerability allows attackers to control the Tor Browser, but may not affect anonymity on Tails.

Mozilla is aware of the attack and released a fix within 25 hours of responsible disclosure. Additionally, a Local Privilege Escalation (LPE) vulnerability was discovered in iTunes version "12.13.2.3", which has been patched in the September update.

It is essential to stay updated with security patches and be cautious when downloading apps to avoid potential threats.

Source: https://dev.to/carrie_luo1/recent-0day-threat-intelligence-alert-from-darknet-cnl