🚨 CISA KEV 2[−]
8 Dec KEVCISA Adds Critical React2Shell Vulnerability to KEV Catalog After Active ExploitationThe Cybersecurity and Infrastructure Security Agency (CISA) has officially added a high-severity vulnerability affecting Meta’s React Server Components to its Known Exploited Vulnerabilities (KEV) catalog. Assigned the identifier CVE-2025-55182, the security flaw dubbed …GBHACKERS.COM
8 Dec KEVCISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability Th…CISA.GOV
🐛 COMMON VULNERABILITIES AND EXPOSURES 23[−]
8 DecCritical Cal.com Flaw Allows Attackers to Bypass Authentication Using Fake TOTP CodesCal.com has disclosed a critical authentication bypass vulnerability that could allow attackers to gain unauthorized access to user accounts by exploiting a flaw in password verification logic. The flaw, tracked as CVE-2025-66489 and assigned a critical CVSS v4 score of 9.3, affe…GBHACKERS.COM
8 Dec KEVCritical React2Shell RCE Flaw Actively Exploited to Run Malicious CodeA critical remote code execution vulnerability in React Server Components has emerged as an active exploitation target, with security researchers observing widespread automated attacks across the internet. The flaw, tracked as CVE-2025-55182 and dubbed “React2Shel…GBHACKERS.COM
8 DecExploitation of React2Shell SurgesAn increasing number of threat actors have been attempting to exploit the React vulnerability CVE-2025-55182 in their attacks. The post Exploitation of React2Shell Surges appeared first on SecurityWeek .SECURITYWEEK.COM
8 Dec KEVSneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet AttacksA critical security flaw in the Sneeit Framework plugin for WordPress is being actively exploited in the wild, per data from Wordfence. The remote code execution vulnerability in question is CVE-2025-6389 (CVSS score: 9.8), which affects all versions of the plugin prior to and in…THEHACKERNEWS.COM
8 DecApache Tika hit by critical vulnerability thought to be patched months agoA security flaw in the widely-used Apache Tika XML document extraction utility, originally made public last summer, is wider in scope and more serious than first thought, the project’s maintainers have warned. Their new alert relates to two entwined flaws, the first CVE-2025-5498…CSOONLINE.COM
8 DecCVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZEInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40287 exfat: fix improper check of dentry.stream.valid_sizeInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40275 ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_baddInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40285 smb/server: fix possible refcount leak in smb2_sess_setup()Information published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40273 NFSD: free copynotify stateid in nfs4_free_ol_stateid()Information published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40280 tipc: Fix use-after-free in tipc_mon_reinit_self().Information published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40281 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rtoInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40269 ALSA: usb-audio: Fix potential overflow of PCM transfer bufferInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40289 drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAMInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40278 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleakInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40268 cifs: client: fix memory leak in smb3_fs_context_parse_paramInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40272 mm/secretmem: fix use-after-free race in fault handlerInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40288 drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devicesInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40284 Bluetooth: MGMT: cancel mesh send timer when hdev removedInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40283 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAFInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40286 smb/server: fix possible memory leak in smb2_read()Information published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40279 net: sched: act_connmark: initialize struct tc_ife to fix kernel leakInformation published.MSRC.MICROSOFT.COM
8 DecCVE-2025-40282 Bluetooth: 6lowpan: reset link-local header on ipv6 recv pathInformation published.MSRC.MICROSOFT.COM
⚠️ VULNERABILITY DISCLOSURE 27[−]
8 DecDevelopmentTools May Allow Remote CompromiseExplosive React Vulnerability and AI Tool Flaws Uncovered: Major Implications for Cybersecurity In this episode of Cybersecurity Today, host David Shipley discusses a new significant React vulnerability, React2Shell, that has caused widespread confusion and debate in the security…CYBERSECURITYTODAY.LIBSYN.COM
8 DecIndonesia’s Gambling Industry Reveals Clues of Nationwide Cyber InvolvementA massive Indonesian-speaking cybercrime operation spanning over 14 years has been uncovered, revealing a sophisticated infrastructure that shows hallmarks of state-level backing and resources typically associated with advanced persistent threat actors. Security researchers at Ma…GBHACKERS.COM
8 DecCritical Vulnerabilities Found in GitHub Copilot, Gemini CLI, Claude, and Other AI Tools Affect MillionsA groundbreaking security research project has uncovered a new class of vulnerabilities affecting virtually every major AI-powered integrated development environment (IDE) and coding assistant on the market. Dubbed “IDEsaster,” this attack chain exploits fundamental f…GBHACKERS.COM
8 DecVaillant CISO: NIS2 complexity and lack of clarity endanger its missionCSO Germany: The energy sector is increasingly becoming a target for cybercriminals. Experts and the Federal Office for Information Security (BSI) believe that protection in this area must be significantly increased. How do you assess the current situation? Reiß: The geopolitical…CSOONLINE.COM
8 DecOffensive security takes center stage in the AI eraSara Madden is looking to take a more offensive approach to safeguarding her company. The Convera CISO wants to add a red team to stress test the financial services company’s systems and identify where defenses should be bolstered. She also wants to incorporate purple teaming , w…CSOONLINE.COM
8 DecApache warns of critical vulnerability in Tika toolkitsubmitted by BrikoX to cybersecurity 2 points | 0 comments https://www.techzine.eu/news/security/137059/apache-warns-of-critical-vulnerability-in-tika-toolkit/ The Apache Software Foundation discovered a serious security flaw in Apache Tika, a widely used open source tool for ana…SH.ITJUST.WORKS
8 DecFix your dumb misconfigurations, AI isn't people, and the weekly news - ESW #436Interview with Danny Jenkins: How badly configured are your endpoints? Misconfigurations are one of the most overlooked areas in terms of security program quick wins. Everyone freaks out about vulnerabilities, patching, and exploits. Meanwhile, security tools are misconfigured. T…YOUTUBE.COM
8 DecCritical Apache Tika Vulnerability Leads to XXE InjectionThe bug allows attackers to carry out XML External Entity (XXE) injection attacks via crafted XFA files inside PDF files. The post Critical Apache Tika Vulnerability Leads to XXE Injection appeared first on SecurityWeek .SECURITYWEEK.COM
8 DecAndroid Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft FeaturesCybersecurity researchers have disclosed details of two new Android malware families dubbed FvncBot and SeedSnatcher, as another upgraded version of ClayRat has been spotted in the wild. The findings come from Intel 471, CYFIRMA, and Zimperium, respectively. FvncBot, which masque…THEHACKERNEWS.COM
8 DecLOLPROX Unveils Undetected Exploitation Routes for Stealthy Hypervisor AttacksA new security analysis has unveiled “LOLPROX,” a comprehensive catalog of “Living Off The Land” (LOL) techniques specifically targeting Proxmox Virtual Environment (VE). The research, detailed by security researcher Andy Gill (ZephrSec), highlights how th…GBHACKERS.COM
8 DecNext.js Releases Scanner to Detect and Fix Apps Affected by React2Shell VulnerabilityNext.js developers have a new weapon in the fight against the critical “React2Shell” vulnerability. This new scanner offers a simple, one-line solution for development teams to identify vulnerable versions of Next.js and React Server Components (RSC) and apply the nec…GBHACKERS.COM
8 DecHackers Target Developers Using Malicious VS Code and Cursor AI ExtensionsVisual Studio Code and AI-powered IDEs such as Cursor AI and Windsurf are emerging as one of the most critical and overlooked attack surfaces in the modern software supply chain. Installed on millions of developer machines worldwide, these tools often run with access to source co…GBHACKERS.COM
8 DecWatchGuard Firebox Vulnerabilities Let Hackers Skip Integrity Validation and Plant Malicious CodeWatchGuard Technologies has disclosed critical security vulnerabilities affecting its Firebox firewall products that could allow attackers to bypass system integrity checks and execute malicious code. The company released patches on December 4, 2025, addressing six distinct vulne…GBHACKERS.COM
8 Dec⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & MoreIt’s been a week of chaos in code and calm in headlines. A bug that broke the internet’s favorite framework, hackers chasing AI tools, fake apps stealing cash, and record-breaking cyberattacks — all within days. If you blink, you’ll miss how fast the threat map is changing. New f…THEHACKERNEWS.COM
8 DecReact2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerablesubmitted by kid to cybersecurity 1 points | 0 comments https://www.bleepingcomputer.com/news/security/react2shell-flaw-exploited-to-breach-30-orgs-77k-ip-addresses-vulnerable/SH.ITJUST.WORKS
8 DecKI schafft neue Sicherheitsrisiken für OT-NetzwerkeSicherheitsbehörden sehen in der vermehrten Nutzung von KI eine Gefahr für die Sicherheit von OT-Systemen. Durch bigjom jom – shutterstock.com Die Sicherheit der Betriebstechnik (Operational Technology – OT) in kritischen Infrastrukturen ist seit Jahren ein immer wiederkehrendes …CSOONLINE.COM
8 DecResearchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attackssubmitted by kid to cybersecurity 1 points | 0 comments https://thehackernews.com/2025/12/researchers-uncover-30-flaws-in-ai.htmlSH.ITJUST.WORKS
8 DecHackers Exploit Multiple Ad Networks to Distribute Triada Malware to Android UsersAdex, the anti-fraud and traffic-quality platform operating under AdTech Holding, has successfully identified and neutralized a sophisticated, multi-year malware operation linked to the infamous Triada Trojan. This campaign, which has persistently targeted the mobile advertising …GBHACKERS.COM
8 DecUS Contributes to 44% of Cyber Attacks; Public Administration Targeted for Financial GainsGlobal cybercrime is accelerating toward a projected cost of 15.63 trillion dollars by 2029, up from an estimated 10.5 trillion dollars today, as criminals exploit new technologies faster than businesses can defend against them. Yet 59% of organisations say they suffered at least…GBHACKERS.COM
8 DecHackers Exploit Delivery Receipts in Messaging Apps to Steal Users’ Private InformationA critical security vulnerability has been discovered affecting billions of WhatsApp and Signal users worldwide. Researchers found that hackers can exploit delivery receipts to secretly monitor user activity, track daily routines, and drain battery life, all without leaving any v…GBHACKERS.COM
8 DecAgents at the Door: Vetting Non-Human Identities in External IAM - Rakesh Soni - CSP #219This episode was about agentic IAM—what it is and the risks that come with letting non-human agents act for customers. We defined external IAM, then traced how the industry moved from basic login and MFA to consent, delegation, and now agent-to-agent interactions. Along the way w…YOUTUBE.COM
8 DecWhen it comes to security resilience, cheaper isn’t always betterA procurement team throws a small party. They’ve shaved millions off the supplier budget. The CFO beams. The board applauds. Six months later, a cyber incident or supply disruption wipes out those savings in days. The champagne glow fades. This is not fiction. It happens every ye…CSOONLINE.COM
8 DecKeep AI browsers out of your enterprise, warns GartnerAI browsers including Perplexity Comet and OpenAI’s ChatGPT Atlas present security risks that cannot be adequately mitigated, and enterprises should prevent employees using them, according to Gartner. “Gartner strongly recommends that organizations block all AI browsers for the f…CSOONLINE.COM
8 DecArchitecting Security for Agentic Capabilities in ChromePosted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and this is a responsibility w…SECURITY.GOOGLEBLOG.COM
8 DecNews alert: INE recognized in G2 Winter 2026 rankings for global strength in cyber and IT trainingCARY, N.C., Dec. 4, 2025, CyberNewswire — INE has been recognized with seven G2 Winter 2026 badges, underscoring its continued leadership in online course delivery, technical skills development, and cybersecurity education. This season’s awards include Leader status in the Online…LASTWATCHDOG.COM
8 DecFinCEN says ransomware gangs extorted over $2.1B from 2022 to 2024A new report by the Financial Crimes Enforcement Network (FinCEN) shows that ransomware activity peaked in 2023 before falling in 2024, following a series of law enforcement actions targeting the ALPHV/BlackCat and LockBit ransomware gangs. [...]BLEEPINGCOMPUTER.COM
8 Dec KEVCritical React2Shell Vulnerability Under Active Exploitation by Chinese Threat ActorsA critical vulnerability in React Server Components is allegedly being actively exploited by multiple Chinese threat actors, Recorded Future recommends organizations patch their systems immediately.RECORDEDFUTURE.COM
📢 SECURITY ADVISORIES 6[−]
🔥 INCIDENT REPORTING 14[−]
8 DecShanya EDR Killer: The New Favorite Tool for Ransomware OperatorsA sophisticated new “packer-as-a-service” tool known as Shanya has emerged in the cybercriminal underground, rapidly becoming a preferred weapon for major ransomware groups looking to neutralize endpoint defenses. According to new research from Sophos, Shanya is an ev…GBHACKERS.COM
8 DecLockBit 5.0 Infrastructure Exposed as Hackers Leak Critical Server DataSecurity researchers have uncovered critical infrastructure details for the notorious LockBit 5.0 ransomware operation, including the IP address 205.185.116.233 and the domain karma0.xyz, which hosts the group’s latest leak site. The discovery represents a significant opera…GBHACKERS.COM
8 DecMuddyWater Deploys UDPGangster Backdoor in Targeted Turkey-Israel-Azerbaijan CampaignThe Iranian hacking group known as MuddyWater has been observed leveraging a new backdoor dubbed UDPGangster that uses the User Datagram Protocol (UDP) for command-and-control (C2) purposes. The cyber espionage activity targeted users in Turkey, Israel, and Azerbaijan, according …THEHACKERNEWS.COM
8 DecRansomware Payments Surpassed $4.5 Billion: US TreasuryRansomware payments reached the highest level in 2023, at $1.1 billion paid in 1,512 reported incidents. The post Ransomware Payments Surpassed $4.5 Billion: US Treasury appeared first on SecurityWeek .SECURITYWEEK.COM
8 DecLockBit 5.0 Infrastructure Exposed in New Server, IP and Domain Leaksubmitted by kid to cybersecurity 1 points | 0 comments https://cybersecuritynews.com/lockbit-5-0-infrastructure-exposed/SH.ITJUST.WORKS
8 DecTri-Century Eye Care Data Breach Impacts 200,000 IndividualsTri-Century Eye Care was targeted recently by the Pear ransomware group, which claimed to have stolen over 3 Tb of data. The post Tri-Century Eye Care Data Breach Impacts 200,000 Individuals appeared first on SecurityWeek .SECURITYWEEK.COM
8 DecUS military contractor breach expose employee data | Cybernewssubmitted by kid to cybersecurity 1 points | 0 comments https://cybernews.com/security/mag-aerospace-military-contractor-data-breach/SH.ITJUST.WORKS
8 DecCl0p ransomware stole Barts Health's patient and staff invoice data, trust confirms | Cybernewssubmitted by kid to cybersecurity 2 points | 0 comments https://cybernews.com/news/cl0p-ransomware-stole-barts-healths-patient-and-staff-invoice-data-trust-confirms/SH.ITJUST.WORKS
8 DecOperation Kitten: Hacktivist Groups Targeting Israel with CyberattacksA new platform known as the “kitten” project has emerged as a coordination hub for hacktivist campaigns targeting Israel, operating at the intersection of cyber activism and state-aligned influence. While the operators publicly deny direct ties to Iran, technical evidence and inf…GBHACKERS.COM
8 DecAsus supplier hacked by Everest gang, loses 1 TB of data • The Registersubmitted by kid to cybersecurity 1 points | 0 comments https://www.theregister.com/2025/12/05/asus_supplier_hack/SH.ITJUST.WORKS
8 DecPharma firm Inotiv discloses data breach after ransomware attacksubmitted by kid to cybersecurity 2 points | 0 comments https://www.bleepingcomputer.com/news/security/pharma-firm-inotiv-discloses-data-breach-after-ransomware-attack/SH.ITJUST.WORKS
8 DecStronger together: New Beazley collaboration enhances cyber resilienceTo bolster security for our customers, we need to align with our ecosystem partners. Our new collaboration with Beazley as an incident response partner is a step in that direction. The post Stronger together: New Beazley collaboration enhances cyber resilience appeared first on M…MICROSOFT.COM
8 DecExperts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RATCybersecurity researchers are calling attention to a new campaign dubbed JS#SMUGGLER that has been observed leveraging compromised websites as a distribution vector for a remote access trojan named NetSupport RAT. The attack chain, analyzed by Securonix, involves three main movin…THEHACKERNEWS.COM
8 DecRansomware gangs turn to Shanya EXE packer to hide EDR killersSeveral ransomware groups have been spotted using a packer-as-a-service (PaaS) platform named Shanya to assist in EDR (endpoint detection and response) killing operations. [...]BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 18[−]
8 DecISC Stormcast For Monday, December 8th, 2025 https://isc.sans.edu/podcastdetail/9728, (Mon, Dec 8th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
8 DecPortugal updates cybercrime law to exempt security researcherssubmitted by BrikoX to cybersecurity 1 points | 0 comments https://www.bleepingcomputer.com/news/security/portugal-updates-cybercrime-law-to-exempt-security-researchers/ Portugal has modified its cybercrime law to establish a legal safe harbor for good-faith security research and…SH.ITJUST.WORKS
8 DecPorsche Cars Disabled After Major Failure in Installed Satellite Security SystemHundreds of Porsche owners across Russia are facing a significant problem as their luxury cars have suddenly stopped working. The issue stems from a failure in the factory-installed security and tracking systems, which have completely shut down the vehicles. According to reports …GBHACKERS.COM
8 DecOceanLotus Targets Xinchuang Ecosystem with Sophisticated Supply Chain AttacksThe advanced persistent threat (APT) group known as OceanLotus (APT32) has been observed launching a sophisticated cyberespionage campaign specifically targeting China’s “Xinchuang” initiative the nation’s strategic push to replace foreign technology with indige…GBHACKERS.COM
8 DecSubstitution Cipher Based on The Voynich ManuscriptHere’s a fun paper: “ The Naibbe cipher: a substitution cipher that encrypts Latin and Italian as Voynich Manuscript-like ciphertext “: Abstract: In this article, I investigate the hypothesis that the Voynich Manuscript (MS 408, Yale University Beinecke Library)…SCHNEIER.COM
8 DecNVIDIA research shows how agentic AI fails under attack - Help Net Securitysubmitted by kid to cybersecurity 1 points | 0 comments https://www.helpnetsecurity.com/2025/12/08/nvidia-agentic-ai-security-framework/SH.ITJUST.WORKS
8 DecNotorious Cybercrime Group is Now Targeting Zendesk UsersReliaQuest warns that the cybercriminal collective “Scattered Lapsus$ Hunters” appears to be using social engineering attacks to target organizations’ Zendesk instances.KNOWBE4.COM
8 DecExposing the Core Functionalities of QuasarRAT: Encrypted Configuration and Obfuscation TechniquesIn the second installment of the “Advent of Configuration Extraction” series, security researchers have unwrapped QuasarRAT, a widely-deployed .NET remote access trojan (RAT), revealing sophisticated techniques for extracting its encrypted configuration from both clea…GBHACKERS.COM
8 DecNVIDIA and Lakera AI Propose Unified Framework for Agent SafetyNVIDIA and Lakera AI have introduced a groundbreaking unified security and safety framework designed to address the emerging challenges posed by autonomous AI agents in enterprise environments. This collaborative effort represents a significant step forward in making agentic syst…GBHACKERS.COM
8 DecApple, Google, and Samsung May Soon Activate Always-On GPS in IndiaIndia’s government is considering a controversial proposal that could require smartphone manufacturers to enable satellite location tracking on all devices permanently. The plan has sparked significant backlash from major tech companies, including Apple, Google, and Samsung…GBHACKERS.COM
8 DecResemble AI Raises $13 Million for AI Threat DetectionThe cybersecurity startup will use the investment to accelerate product development and fuel global expansion. The post Resemble AI Raises $13 Million for AI Threat Detection appeared first on SecurityWeek .SECURITYWEEK.COM
8 DecCISO Conversations: Keith McCammon, CSO and Co-founder at Red CanaryFrom a basement computer lab to the C-Suite: How Keith McCammon built his career and Red Canary with zero formal training. The post CISO Conversations: Keith McCammon, CSO and Co-founder at Red Canary appeared first on SecurityWeek .SECURITYWEEK.COM
8 DecHow Agentic BAS AI Turns Threat Headlines Into Defense StrategiesPicus Security explains why relying on LLM-generated attack scripts is risky and how an agentic approach maps real threat intel to safe, validated TTPs. Their breakdown shows how teams can turn headline threats into reliable defense checks without unsafe automation. [...]BLEEPINGCOMPUTER.COM
8 DecThreatLocker: Zero Trust & Threat DetectionJoin Danny Jenkins as he unveils the power of zero trust architecture and threat detection in cybersecurity. Understand how static protection tools and dynamic detection teams work together to protect against common misconfigurations and unknown threats. Subscribe to our podcasts…YOUTUBE.COM
8 DecGoogle Fortifies Chrome Agentic AI Against Indirect Prompt Injection AttacksChrome’s new agentic browsing protections include user alignment critic, expanded origin-isolation capabilities, and user confirmations. The post Google Fortifies Chrome Agentic AI Against Indirect Prompt Injection Attacks appeared first on SecurityWeek .SECURITYWEEK.COM
8 DecNew FvncBot Android banking trojan targets Polandsubmitted by kid to cybersecurity 1 points | 0 comments https://www.intel471.com/blog/new-fvncbot-android-banking-trojan-targets-polandSH.ITJUST.WORKS
8 DecINE Earns G2 Winter 2026 Badges Across Global MarketsCary, North Carolina, USA, December 4th, 2025, CyberNewsWire Cybersecurity and IT training platform maintains Leader and Momentum Leader positions while expanding regional excellence INE has been recognized with seven G2 Winter 2026 badges, underscoring its continued leadership i…GBHACKERS.COM
8 DecWhen the Digital World Turns Physical: The Expanding Role of Threat Intelligence in Executive ProtectionDiscover how converged threat intelligence protects executives from deepfakes, doxxing, and cyber-enabled physical threats with Recorded Future.RECORDEDFUTURE.COM
🌐 CYBER THREAT LANDSCAPE 5[−]
8 DecAI-Automated Threat Hunting Brings GhostPenguin Out of the ShadowsIn this blog entry, Trend™ Research provides a comprehensive breakdown of GhostPenguin, a previously undocumented Linux backdoor with low detection rates that was discovered through AI-powered threat hunting and in-depth malware analysis.TRENDMICRO.COM
8 DecHow Can Retailers Cyber-Prepare for the Most Vulnerable Time of the Year?The holiday season compresses risk into a short, high-stakes window. Systems run hot, teams run lean, and attackers time automated campaigns to get maximum return. Multiple industry threat reports show that bot-driven fraud, credential stuffing and account takeover attempts inten…THEHACKERNEWS.COM
8 DecShellShock Makes a Comeback and RondoDox Changes TacticsLegacy bugs continue to serve attackers.F5.COM
8 DecMalicious VSCode extensions on Microsoft's registry drop infostealersTwo malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing malware that can take screenshots, steal credentials, and hijack browser sessions. [...]BLEEPINGCOMPUTER.COM
8 DecShellShock Makes a Comeback and RondoDox Changes TacticsLegacy bugs continue to serve attackers.F5.COM
📡 INFOSEC NEWS 6[−]
8 DecPrivacy concerns raised as Grok AI found to be a stalker’s best friendGrok, the AI chatbot developed by Elon Musk's xAI, has been found to exhibit more alarming behaviour - this time revealing the home addresses of ordinary people upon request. Read more in my article on the Hot for Security blog.BITDEFENDER.COM
8 DecPetco’s security lapse affected customers’ SSNs, drivers’ licenses and morePetco said the exposure was due to an error in an application, and that it is notifying victims’ whose data was affected.TECHCRUNCH.COM
8 DecGoogle Chrome adds new security layer for Gemini AI agentic browsingGoogle Chrome is introducing a new security architecture designed to protect upcoming agentic AI browsing features powered by Gemini. [...]BLEEPINGCOMPUTER.COM
8 DecPoland arrests Ukrainians utilizing 'advanced' hacking equipmentThe police in Poland arrested three Ukrainian nationals for allegedly attempting to damage IT systems in the country using hacking equipment and for obtaining "computer data of particular importance to national defense." [...]BLEEPINGCOMPUTER.COM
8 DecFTC upholds ban on stalkerware founder Scott ZuckermanZuckerman, who used to run the stalkerware apps SpyFone and SpyTrac, claimed the ban is hurting his unrelated business.TECHCRUNCH.COM
8 Dec[webapps] Pluck 4.7.7-dev2 - PHP Code ExecutionPluck 4.7.7-dev2 - PHP Code ExecutionEXPLOIT-DB.COM