Ledger says a MediaTek flaw may let attackers extract PINs, wallet recovery phrases and encrypted data from Android phones.

The CVE-2025-20435 exploit requires no malware, no internet connection, and no password. MediaTek powers a huge share of the global Android market, particularly in mid-range ...

The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account to be exploited ...