-
The media reports in January 2026 were triggered by a security warning issued by Apple on December 16, 2025! (20th Jan 2026)
Preface: This article is scheduled for release on January 21, 2026. It may contain some key topics that will be helpful to developers. Therefore it release today. The “spyware” mentioned in April 2025 was the Apple Company policy, but the attacks reported in January 2026 are live threats using newer exploits (CVE-2025-43529 and CVE-2025-14174). If…
-
CVE-2025-13328: About multiplexer control commands from the ETSI TS 07.10 20th Jan 2026
Mitre, NVD Official Published: 2026-01-16 Preface: ETSI TS 07.10 defines the multiplexer protocol for GSM networks, and DLCI 0 (Data Link Connection Identifier 0) specifically refers to the control channel used to manage multiple virtual serial sessions (like data, fax, voice) over a single physical serial link or its wireless emulation (like Bluetooth’s RFCOMM) to…
-
CVE-2025-29943: CPU-caused stack corruption issue caused by flipping an undocumented MSR bit (19th Jan 2026)
Initial publication: 2026-01-15 Preface: CVE-2025-29943 allows disabling AES-NI at runtime, forcing mbedTLS to fall back to a vulnerable software AES implementation. In SGX enclaves, this enables cache-timing attacks to recover AES keys. Attack Prerequisites: Background: An SGX enclave (Software Guard eXtensions) is a secure, isolated area within a computer’s processor and memory, creating a Trusted…
-
Coincidences don’t only happen on Earth; they can happen in space too. Especially since we encountered 3I/ATLAS! (17th Jan 2026)
Preface: If 3I/ATLAS is a detector, it would observe Field-Aligned Currents (FACs)—massive electrical currents flowing along magnetic field lines toward the North and South poles. Prediction and Imagination: The only “alignment” on January 22, 2026 is the rare, nearly perfect straight line configuration of the Sun, Earth, and 3I/ATLAS, with Earth in the middle. The…
-
CVE-2025-33206 – About NVIDIA NSIGHT Graphics for Linux (16th Jan 2026)
Preface: On Linux, this typically manifests as: Attackers could leverage writable directories or environment variables (like LD_LIBRARY_PATH) to inject malicious code when Nsight starts profiling. Background: Nsight Compute – As an interactive kernel profiler for CUDA applications, Nsight Compute provides detailed performance metrics and API debugging via a user interface and command line tool. Nsight…
-
AMD ID: AMD-SB-7038 – Memory Re-orderings as a Timerless Side-channel. AMD recommends that software developers employ existing best practices (14-01-2026)
Preface: The vulnerability described in AMD-SB-7038 is based on a general microarchitectural behavior: memory reordering and out-of-order execution. These techniques are used by all major CPU vendors (Intel, ARM, etc.) to improve performance. Background: The bulletin describes a research paper titled “MEMORY DISORDER: Memory Re-orderings as a Timerless Side-channel.” Key points from AMD’s disclosure: Nature…
-
CVE-2025-68493: Apache Struts recently released a security advisory recommending that you check your code and upgrade. Otherwise, the new version of Struts will refuse to execute any existing code that contains security vulnerabilities. (14th Jan 2026)
Preface: Many large, enterprise-level companies across various industries use or have used the open-source Apache Struts framework for building Java web applications. Companies using this framework must ensure they are on a currently supported version and apply security patches immediately. Background: The Model-View-Controller (MVC) is a software architectural pattern used in Java and other programming…
-
CVE-2025-47393: In Qualcomm-specified products, memory corruption occurs when the core driver accesses resources. 13th Jan-2026
Qualcomm – Official announcement: 1st Jan 2026 Preface: The Qualcomm Snapdragon Ride platform is used to develop advanced driver assistance systems (ADAS) and autonomous driving (AD) for vehicles. It combines powerful hardware (SoCs containing AI, GPUs, and vision engines) and software (SDKs, cloud tools) to support a wide range of functions from basic safety features…
-
CVE-2025-47345: About Qualcomm – Reusing a Nonce, Key Pair in Encryption in Automotive Platform (12th Jan 2026)
Official published: 5th JAN 2026 Preface: When used in an automotive context, the Snapdragon 8 Gen 3 Mobile Platform—and its dedicated automotive counterparts—utilize a High-Level Operating System (HLOS). While the “Mobile Platform” is a consumer-grade chip typically found in smartphones, some automakers have integrated it directly into vehicles. For purpose-built automotive solutions, Qualcomm offers the…
-
Maven orbiter, where are you? (10th Jan, 2026)
Preface: As of January 10, 2026, NASA has lost contact with the MAVEN spacecraft, and recovery efforts are currently paused due to an astronomical phenomenon known as solar conjunction. Background: NASA’s MAVEN orbiter uses an Electra UHF transceiver to act as a crucial “bent pipe” communication relay, receiving data from rovers and landers on Mars…