Cybersecurity Feed
Updated: 17/12/2025, 08:52:54 • Items: 150
Keywords
CVE- ClickFix Malware Leak Attack 0-day zero-day RCE remote code execution privilege escalation LPE kernel exploit PoC exploit weaponized exploit KEV CISA KEV critical vulnerability supply chain attack dependency hijacking DLL sideloading code injection memory corruption SQL injection SSRF XSS sandbox escape hypervisor escape ransomware data exfiltration lateral movement APT nation state Cobalt Strike Sliver Metasploit malware campaign phishing kit loader infostealer rootkit persistence command and control C2 backdoor Fortinet FortiOS FortiGate GlobalProtect Palo Alto Cortex XDR XSIAM Prisma PAN-OS CrowdStrike SentinelOne Mandiant Elastic Security Azure AD KQL Active Directory Kerberos Golden Ticket pass-the-hash Okta identity breach session hijack exploit
BleepingComputer — 17/12/2025, 04:29:35

Cellik Android malware builds malicious versions from Google Play apps Click here

BleepingComputer — 17/12/2025, 03:47:46

GhostPoster attacks hide malicious JavaScript in Firefox addon logos Click here

darkreading — 17/12/2025, 02:03:16

Venezuelan Oil Company Downplays Alleged US Cyberattack Click here

BleepingComputer — 17/12/2025, 01:43:09

Amazon disrupts Russian GRU hackers attacking edge network devices Click here

Cyber Security News — 17/12/2025, 01:03:47

APT-C-35 Infrastructure Activity Leveraged Using Apache HTTP Response Indicators Click here

Cyber Security News — 17/12/2025, 00:49:35

Russian Hackers Attacking Network Edge Devices in Western Critical Infrastructure CVE-2022-26318 Critical Click here

Cyber Security News — 17/12/2025, 00:23:03

LLMs are Accelerating the Ransomware Operations with Functional Tools and RaaS High Click here

Cyber Security News — 16/12/2025, 23:50:32

Hackers Can Manipulate Internet-Based Solar Panel Systems to Execute Attacks in Minutes Click here

SOC Prime — 16/12/2025, 23:33:15

CVE-2025-14174 Vulnerability: A New Memory Corruption Zero-Day Vulnerability in Apple WebKit Exploited in Targeted Attacks CVE-2025-14174 Critical Click here

SecurityWeek — 16/12/2025, 23:30:00

From Open Source to OpenAI: The Evolution of Third-Party Risk Click here

Cyber Security News — 16/12/2025, 23:08:07

Microsoft Details Mitigations Against React2Shell RCE Vulnerability in React Server Components CVE-2025-55182 High Click here

Cyber Security News — 16/12/2025, 22:16:56

Link11 Identifies Five Cybersecurity Trends Set to Shape European Defense Strategies in 2026 Click here

The Hacker News — 16/12/2025, 22:05:00

Compromised IAM Credentials Power a Large AWS Crypto Mining Campaign Click here

Cybersecurity Blog - Nextron Systems — 16/12/2025, 21:36:31

Say hello to Nextron’s RuneAI High Click here

BleepingComputer — 16/12/2025, 21:27:34

Hackers exploit newly patched Fortinet auth bypass flaws High Click here

Cyber Security News — 16/12/2025, 21:24:39

Top 3 SOC Bottlenecks and How to Solve Them High Click here

Cyber Security News — 16/12/2025, 20:53:09

CISA Warns of Apple WebKit Vulnerability 0-Day Vulnerability Exploited in Attacks CVE-2025-43529 Critical Click here

BleepingComputer — 16/12/2025, 20:49:17

Cyberattack disrupts Venezuelan oil giant PDVSA's operations Click here

BleepingComputer — 16/12/2025, 20:31:11

The Hidden Risk in Virtualization: Why Hypervisors are a Ransomware Magnet High Click here

Red Canary — 16/12/2025, 20:17:35

KPop Malware Hunters: 2025’s takedowns Click here

Cyber Security News — 16/12/2025, 20:04:34

Fortinet FortiWeb Vulnerability (CVE-2025-64446) Exploited in the Wild for Full Admin Takeover CVE-2025-64446 Critical Click here

SecurityWeek — 16/12/2025, 19:56:25

700,000 Records Compromised in Askul Ransomware Attack High Click here

Krebs on Security — 16/12/2025, 19:44:48

Most Parked Domains Now Serving Malicious Content Click here

Cyber Security News — 16/12/2025, 19:27:30

Windows Admin Center Vulnerability (CVE-2025-64669) Let Attackers Escalate Privileges CVE-2025-64669 Medium Click here

SecurityWeek — 16/12/2025, 18:52:11

Amazon: Russian Hackers Now Favor Misconfigurations in Critical Infrastructure Attacks Critical Click here

Check Point Research — 16/12/2025, 18:31:37

Inside Ink Dragon: Revealing the Relay Network and Inner Workings of a Stealthy Offensive Operation CVE-2025-49706 High Click here

All CISA Advisories — 16/12/2025, 17:30:00

Mitsubishi Electric GT Designer3 CVE-2025-11009 Click here

All CISA Advisories — 16/12/2025, 17:30:00

CISA Releases Seven Industrial Control Systems Advisories Click here

All CISA Advisories — 16/12/2025, 17:30:00

Hitachi Energy AFS, AFR and AFF Series CVE-2024-3596 Click here

All CISA Advisories — 16/12/2025, 17:30:00

Johnson Controls PowerG, IQPanel and IQHub CVE-2025-61738 Click here

All CISA Advisories — 16/12/2025, 17:30:00

Güralp Systems Fortimus Series, Minimus Series, and Certimus Series CVE-2025-14466 High Click here

All CISA Advisories — 16/12/2025, 17:30:00

CISA Adds One Known Exploited Vulnerability to Catalog CVE-2025-59718 Critical Click here

BleepingComputer — 16/12/2025, 17:14:06

European authorities dismantle call center fraud ring in Ukraine Click here

SecurityWeek — 16/12/2025, 17:09:54

JumpCloud Remote Assist Vulnerability Can Expose Systems to Takeover Click here

The Hacker News — 16/12/2025, 16:28:00

Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass CVE-2025-59718 Click here

SecurityWeek — 16/12/2025, 14:57:20

In-the-Wild Exploitation of Fresh Fortinet Flaws Begins Click here

Cyble — 16/12/2025, 14:34:25

The Week in Vulnerabilities: Cyble Tracks New ICS Threats, Zero-Days, and Active Exploitation CVE-2025-67494 Critical Click here

The Hacker News — 16/12/2025, 13:51:00

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors Critical Click here

BleepingComputer — 16/12/2025, 04:43:44

Askul confirms theft of 740k customer records in ransomware attack High Click here

BleepingComputer — 16/12/2025, 04:13:10

New SantaStealer malware steals data from browsers, crypto wallets Click here

darkreading — 16/12/2025, 02:55:20

Apple Patches More Zero-Days Used in 'Sophisticated' Attack Critical Click here

darkreading — 16/12/2025, 01:37:48

Think Like an Attacker: Cybersecurity Tips From a CISO Click here

security – Ars Technica — 15/12/2025, 23:43:24

Google will end dark web reports that alerted users to leaked data Click here

The Hacker News — 15/12/2025, 23:16:00

Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats Click here

darkreading — 15/12/2025, 21:03:15

Flaw in Hacktivist Ransomware Lets Victims Decrypt Own Files High Click here

The Hacker News — 15/12/2025, 20:02:00

FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE CVE-2025-61675 High Click here

SOC Prime — 15/12/2025, 19:30:16

CVE-2025-55183 and CVE-2025-55184: New React RSC Vulnerabilities Expose Applications to Denial of Service Attacks and Source Code Leaks CVE-2025-55183 Critical Click here

SentinelLabs - We are hunters, reversers, exploit developers, and tinkerers shedding light on the world of malware, exploits, APTs, and cybercrime across all platforms. — 15/12/2025, 19:30:15

LLMs & Ransomware | An Operational Accelerator, Not a Revolution High Click here

SANS Internet Storm Center, InfoCON: green — 15/12/2025, 18:47:34

More React2Shell Exploits CVE-2025-55182, (Mon, Dec 15th) CVE-2025-55182 Click here

Check Point Research — 15/12/2025, 18:33:28

15th December – Threat Intelligence Report CVE-2025-14174 Critical Click here

The Hacker News — 15/12/2025, 17:54:00

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More High Click here

All CISA Advisories — 15/12/2025, 17:30:00

CISA Adds Two Known Exploited Vulnerabilities to Catalog CVE-2025-14611 Critical Click here

Threat Research & Intelligence Archives - Sekoia.io Blog — 15/12/2025, 13:31:08

Advent of Configuration Extraction – Part 3: Mapping GOT/PLT and Disassembling the SNOWLIGHT Loader Click here

Blog — 15/12/2025, 11:30:00

CrowdStrike Secures Growing AI Attack Surface with Falcon AI Detection and Response Click here

The Hacker News — 15/12/2025, 11:03:00

VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption High Click here

SANS Internet Storm Center, InfoCON: green — 14/12/2025, 21:37:32

Wireshark 4.6.2 Released, (Sun, Dec 14th) Click here

SANS Internet Storm Center, InfoCON: green — 14/12/2025, 01:05:30

ClickFix Attacks Still Using the Finger, (Sat, Dec 13th) Click here

The Hacker News — 13/12/2025, 18:03:00

CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks CVE-2018-4063 Critical Click here

The Hacker News — 13/12/2025, 11:02:00

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild CVE-2025-43529 Critical Click here

Unit 42 — 13/12/2025, 03:10:55

Exploitation of Critical Vulnerability in React Server Components (Updated December 12) CVE-2025-55182 High Click here

darkreading — 13/12/2025, 01:41:43

React2Shell Exploits Flood the Internet as Attacks Continue CVE-2025-55182 Click here

The Hacker News — 13/12/2025, 00:20:00

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads Click here

darkreading — 13/12/2025, 00:07:53

Supply Chain Attacks Targeting GitHub Actions Increased in 2025 Click here

The Hacker News — 12/12/2025, 19:34:00

New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale Click here

darkreading — 12/12/2025, 19:30:00

Are Trade Concerns Trumping US Cybersecurity? Click here

Threat Intelligence — 12/12/2025, 19:30:00

Multiple Threat Actors Exploit React2Shell (CVE-2025-55182) CVE-2025-55182 High Click here

All CISA Advisories — 12/12/2025, 17:30:00

CISA Adds One Known Exploited Vulnerability to Catalog CVE-2018-4063 Critical Click here

All CISA Advisories — 12/12/2025, 17:30:00

CISA Adds One Known Exploited Vulnerability to Catalog CVE-2025-14174 Critical Click here

The Hacker News — 12/12/2025, 14:25:00

New React RSC Vulnerabilities Enable DoS and Source Code Exposure CVE-2025-55182 Click here

The Hacker News — 12/12/2025, 14:11:00

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation CVE-2025-55182 Medium Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 12/12/2025, 13:16:10

Operation MoneyMount-ISO — Deploying Phantom Stealer via ISO-Mounted Executables Click here

darkreading — 12/12/2025, 12:30:00

Hamas-Linked Hackers Probe Middle Eastern Diplomats Click here

SANS Internet Storm Center, InfoCON: green — 12/12/2025, 10:38:36

Abusing DLLs EntryPoint for the Fun, (Fri, Dec 12th) Click here

The Hacker News — 12/12/2025, 10:31:00

CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog CVE-2025-58360 Critical Click here

SOC Prime — 12/12/2025, 01:54:09

CVE-2025-62221 and CVE-2025-54100: Windows Elevation of Privilege and RCE Zero-Day Vulnerabilities Patched CVE-2025-62221 Critical Click here

darkreading — 12/12/2025, 01:41:43

Attackers Exploited Gogs Zero-Day Flaw for Months Critical Click here

The Hacker News — 11/12/2025, 19:10:00

ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More Stories Click here

The Hacker News — 11/12/2025, 18:46:00

NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems Click here

All CISA Advisories — 11/12/2025, 17:30:00

Siemens Energy Services CVE-2025-59392 Click here

All CISA Advisories — 11/12/2025, 17:30:00

Johnson Controls iSTAR CVE-2025-43875 Click here

All CISA Advisories — 11/12/2025, 17:30:00

Varex Imaging Panoramic Dental Imaging Software CVE-2024-22774 Click here

All CISA Advisories — 11/12/2025, 17:30:00

CISA Adds One Known Exploited Vulnerability to Catalog CVE-2025-58360 Critical Click here

All CISA Advisories — 11/12/2025, 17:30:00

Siemens Building X - Security Manager Edge Controller CVE-2022-31807 Click here

All CISA Advisories — 11/12/2025, 17:30:00

2025 CWE Top 25 Most Dangerous Software Weaknesses Click here

All CISA Advisories — 11/12/2025, 17:30:00

Grassroots DICOM (GDCM) CVE-2025-11266 Click here

All CISA Advisories — 11/12/2025, 17:30:00

OpenPLC_V3 CVE-2025-13970 High Click here

All CISA Advisories — 11/12/2025, 17:30:00

Siemens Gridscale X Prepay CVE-2025-40806 High Click here

All CISA Advisories — 11/12/2025, 17:30:00

Johnson Controls iSTAR Ultra CVE-2025-43873 Click here

All CISA Advisories — 11/12/2025, 17:30:00

CISA Releases 12 Industrial Control Systems Advisories Click here

All CISA Advisories — 11/12/2025, 17:30:00

AzeoTech DAQFactory CVE-2025-66590 Click here

Unit 42 — 11/12/2025, 16:30:38

Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite Click here

The Hacker News — 11/12/2025, 16:30:00

WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor Click here

The Hacker News — 11/12/2025, 16:00:00

Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks CVE-2025-8110 Critical Click here

darkreading — 11/12/2025, 15:30:00

Copilot's No-Code AI Agents Liable to Leak Company Data Click here

The Hacker News — 11/12/2025, 12:39:00

Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw Critical Click here

Blog — 11/12/2025, 11:30:00

Data Leakage: AI’s Plumbing Problem Click here

The Hacker News — 11/12/2025, 11:26:00

Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution Critical Click here

SANS Internet Storm Center, InfoCON: green — 11/12/2025, 08:07:47

Using AI Gemma 3 Locally with a Single CPU , (Wed, Dec 10th) Click here

darkreading — 11/12/2025, 03:29:32

Storm-0249 Abuses EDR Processes in Stealthy Attacks Click here

darkreading — 11/12/2025, 02:32:30

ClickFix Style Attack Uses Grok, ChatGPT for Malware Delivery Click here

The Hacker News — 11/12/2025, 01:49:00

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors Click here

The Hacker News — 11/12/2025, 00:51:00

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL High Click here

The Hacker News — 10/12/2025, 19:02:00

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling Click here

Business Insights Cybersecurity Blog by Bitdefender — 10/12/2025, 18:30:01

Bitdefender Threat Debrief | December 2025 Click here

darkreading — 10/12/2025, 18:26:02

Feds: Pro-Russia Hacktivists Target US Critical Infrastructure Click here

The Hacker News — 10/12/2025, 17:24:00

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups CVE-2025-6218 Critical Click here

The Hacker News — 10/12/2025, 17:24:00

Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes Click here

Unit 42 — 10/12/2025, 16:30:12

01flip: Multi-Platform Ransomware Written in Rust High Click here

The Hacker News — 10/12/2025, 14:20:00

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days Critical Click here

Blog — 10/12/2025, 11:30:00

CrowdStrike Achieves 100% Detection, 100% Protection, and Zero False Positives in 2025 MITRE ATT&CK® Enterprise Evaluations Click here

The Hacker News — 10/12/2025, 10:20:00

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws CVE-2025-59718 Click here

darkreading — 10/12/2025, 05:30:00

Japanese Firms Suffer Long Tail of Ransomware Damage High Click here

Krebs on Security — 10/12/2025, 04:48:29

Microsoft Patch Tuesday, December 2025 Edition CVE-2025-62221 Critical Click here

darkreading — 10/12/2025, 03:54:18

Microsoft Fixes Exploited Zero Day in Light Patch Tuesday Click here

darkreading — 10/12/2025, 01:40:32

Packer-as-a-Service Shanya Hides Ransomware, Kills EDR High Click here

The Hacker News — 09/12/2025, 23:55:00

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware Click here

Red Canary — 09/12/2025, 23:32:31

Beyond the bomb: When adversaries bring their own virtual machine for persistence Click here

Business Insights Cybersecurity Blog by Bitdefender — 09/12/2025, 21:51:17

ClickFix: A KISS from Cybercriminals Click here

The Hacker News — 09/12/2025, 21:31:00

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure Click here

The Hacker News — 09/12/2025, 19:07:00

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading High Click here

Cyble — 09/12/2025, 18:34:14

The Week in Vulnerabilities: Cyble Urges D-Link, React Server Fixes CVE-2025-60854 Critical Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 09/12/2025, 18:12:39

Deceptive Layoff-Themed HR Email Distributes Remcos RAT Malware Click here

darkreading — 09/12/2025, 17:38:41

Gemini Enterprise No-Click Flaw Exposes Sensitive Data Click here

All CISA Advisories — 09/12/2025, 17:30:00

Multiple India-based CCTV Cameras CVE-2025-13607 Click here

All CISA Advisories — 09/12/2025, 17:30:00

Opportunistic Pro-Russia Hacktivists Attack US and Global Critical Infrastructure Click here

All CISA Advisories — 09/12/2025, 17:30:00

CISA Releases Three Industrial Control Systems Advisories Click here

All CISA Advisories — 09/12/2025, 17:30:00

Festo LX Appliance CVE-2021-23414 Medium Click here

All CISA Advisories — 09/12/2025, 17:30:00

CISA Adds Two Known Exploited Vulnerabilities to Catalog CVE-2025-6218 Critical Click here

The Hacker News — 09/12/2025, 17:00:00

How to Streamline Zero Trust Using the Shared Signals Framework Click here

The Hacker News — 09/12/2025, 16:44:00

Google Adds Layered Defenses to Chrome to Block Indirect Prompt Injection Threats Click here

The Hacker News — 09/12/2025, 15:05:00

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware High Click here

The Hacker News — 09/12/2025, 13:37:00

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data Click here

Blog — 09/12/2025, 11:30:00

December 2025 Patch Tuesday: One Critical Zero-Day, Two Publicly Disclosed Vulnerabilities Among 57 CVEs Critical Click here

darkreading — 09/12/2025, 03:11:25

Exploitation Activity Ramps Up Against React2Shell CVE-2025-55182 Click here

darkreading — 09/12/2025, 01:51:00

US Treasury Tracks $4.5B in Ransom Payments since 2013 High Click here

The Hacker News — 08/12/2025, 23:07:00

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT Click here

Cyble — 08/12/2025, 20:05:55

Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability CVE-2025-55182 Critical Click here

SOC Prime — 08/12/2025, 19:18:20

CVE-2025-66516: Maximum-Severity Vulnerability in Apache Tika Could Lead to XML External Entity Injection Attack CVE-2025-66516 High Click here

Check Point Research — 08/12/2025, 18:37:25

8th December – Threat Intelligence Report CVE-2025-55182 Critical Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 08/12/2025, 18:24:58

Operation FrostBeacon: Multi-Cluster Cobalt Strike Campaign Targets Russia CVE-2017-0199 Critical Click here

The Hacker News — 08/12/2025, 18:14:00

⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More Click here

The Hacker News — 08/12/2025, 17:28:00

How Can Retailers Cyber-Prepare for the Most Vulnerable Time of the Year? Click here

darkreading — 08/12/2025, 16:47:12

'Broadside' Mirai Variant Targets Maritime Logistics Sector Click here

The Hacker News — 08/12/2025, 16:30:00

Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features Critical Click here

Blogs on Information Technology, Network & Cybersecurity | Seqrite — 08/12/2025, 15:53:14

The ₹250 Crore Question: How India’s DPDPA Rewrites the Cost of a Data Breach Click here

The Hacker News — 08/12/2025, 14:45:00

Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks CVE-2025-6389 Critical Click here

The Hacker News — 08/12/2025, 12:16:00

MuddyWater Deploys UDPGangster Backdoor in Targeted Turkey-Israel-Azerbaijan Campaign Click here

Cybersecurity Blog - Nextron Systems — 08/12/2025, 05:04:05

React Server Components & Next.js Vulnerabilities – Status of Nextron Products CVE-2025-55182 High Click here

The Hacker News — 06/12/2025, 20:54:00

Researcher Uncovers 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks High Click here

The Hacker News — 06/12/2025, 17:10:00

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation CVE-2025-55182 Critical Click here

↑