🐛 COMMON VULNERABILITIES AND EXPOSURES 3[−]
27 DecCVE-2025-68156 Expr has Denial of Service via Unbounded Recursion in Builtin FunctionsInformation published.MSRC.MICROSOFT.COM
27 DecCVE-2025-13699 MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution VulnerabilityInformation published.MSRC.MICROSOFT.COM
27 DecNew MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized MemoryA high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory. The vulnerability, tracked as CVE-2025-14847 (CVSS score: 8.7), has been described as a case of improper handling of length parameter inconsistenc…THEHACKERNEWS.COM
🔥 INCIDENT REPORTING 3[−]
27 DecHackers Compromise Trust Wallet Chrome Extension, Users Claim Millions StolenTrust Wallet users suffered devastating losses exceeding $7 million after cybercriminals compromised the Chrome browser extension version 2.68.0, released on December 24, 2025. The breach, which targeted desktop users exclusively, left hundreds of wallets completely drained withi…GBHACKERS.COM
27 DecMeet the team that investigates when journalists and activists get hacked with government spywareFor years, Access Now’s Digital Security Helpline has been aiding journalists and dissidents who have been targeted with government spyware. This is how they operate.TECHCRUNCH.COM
27 DecWIRED - 2,364,431 breached accountsIn December 2025, 2.3M records of WIRED magazine users allegedly obtained from parent company Condé Nast were published online . The most recent data dated back to the previous September and exposed email addresses and display names, as well as, for a small number of users, their…HAVEIBEENPWNED.COM
🕵️ THREAT INTELLIGENCE 2[−]
27 DecHow to Ruin All of Package Managementsubmitted by codeinabox to security 2 points | 0 comments https://nesbitt.io/2025/12/27/how-to-ruin-all-of-package-management.htmlPROGRAMMING.DEV
27 DecAI Code Writing: Exciting & TerrifyingAt RSA, the CSO of Anthropic revealed that 40% of their code is already written by AI, with expectations to reach 90% soon. This shift is both exciting and terrifying, raising questions about human oversight in cybersecurity. Should AI-generated code be reviewed by humans before …YOUTUBE.COM
📡 INFOSEC NEWS 1[−]
27 DecOpenAI's ChatGPT ads will allegedly prioritize sponsored content in answersOpenAI is reportedly mulling a new form of ads on ChatGPT called "sponsored content," which could influence your buying decisions. [...]BLEEPINGCOMPUTER.COM