Back to today’s briefing

Story perspectives

Critical Vulnerability Threatens Yubico Users Amid Phishing Scare

1/19/2025

50 7

Summary

Story summary

Yubico has raised alarms over a critical vulnerability (CVE-2025-23013) in its pam-u2f software, putting Linux and macOS users at risk of authentication bypass. In a related warning, Microsoft highlights a dangerous phishing scheme aimed at WhatsApp users, where deceptive QR codes can lead to account takeovers by the notorious Russian group, Star Blizzard.

1 of 1

Story summary

Yubico has raised alarms over a critical vulnerability (CVE-2025-23013) in its pam-u2f software, putting Linux and macOS users at risk of authentication bypass. In a related warning, Microsoft highlights a dangerous phishing scheme aimed at WhatsApp users, where deceptive QR codes can lead to account takeovers by the notorious Russian group, Star Blizzard.