🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
28 Dec KEVExploited MongoBleed flaw leaks MongoDB secrets, 87K servers exposedA severe vulnerability affecting multiple MongoDB versions, dubbed MongoBleed (CVE-2025-14847), is being actively exploited in the wild, with over 80,000 potentially vulnerable servers exposed on the public web. [...]BLEEPINGCOMPUTER.COM
⚠️ VULNERABILITY DISCLOSURE 2[−]
28 DecNPM package with 56,000 downloads compromises WhatsApp accountssubmitted by tonytins to cybersecurity 1 points | 0 comments https://securityaffairs.com/186174/malware/npm-package-with-56000-downloads-compromises-whatsapp-accounts.html Koi Security researchers warned that the NPM package ‘Lotusbail’, a WhatsApp Web API library and fork of ‘Ba…INFOSEC.PUB
28 DecWeekly Update 484Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing I think the start of this week's video really nailed it for the techies amongst us: shit doesn't work, you change something random and now shit works …TROYHUNT.COM
🔥 INCIDENT REPORTING 2[−]
28 DecMassive Rainbow Six Siege breach gives players billions of creditsUbisoft's Rainbow Six Siege (R6) suffered a breach that allowed hackers to abuse internal systems to ban and unban players, manipulate in-game moderation feeds, and grant massive amounts of in-game currency and cosmetic items to accounts worldwide. [...]BLEEPINGCOMPUTER.COM
28 DecHacker claims to leak WIRED database with 2.3 million recordsA hacker claims to have breached Condé Nast and leaked an alleged WIRED database containing more than 2.3 million subscriber records, while also warning that they plan to release up to 40 million additional records for other Condé Nast properties. [...]BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 1[−]
28 DecISC Stormcast For Sunday, December 28th, 2025 https://isc.sans.edu/podcastdetail/9750, (Sun, Dec 28th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
📡 INFOSEC NEWS 1[−]
28 DecA Hacker Tells His StoryThis is an interview with former hacker Brian Black. Brian is now on the right side of the battle and bringing his skills to to the fight against hackers. He finds the weaknesses in corporate security so that it can be patched. This was one of my favourite interviews this year. L…CYBERSECURITYTODAY.LIBSYN.COM