This week’s Threatsday: rootkit patch, federal GeoServer hack, Scattered Spider exposed, npm worm, OnePlus SMS flaw, TikTok child-data probe.
Texts laid bare
A permission bypass vulnerability (CVE-2025-10184, CVSS score: 8.2) has been discovered in multiple versions of OnePlus OxygenOS installed on its Android devices. The shortcoming has to do with the fact that sensitive internal content… [4385 chars]
Source: The Hacker News | Published: 2025-09-25T17:24:00Z
Credit: The Hacker News
