MATLOCK.CA
46Articles
7Categories
2025-12-30Date
🐛
70,000+ MongoDB Servers Exposed After MongoBleed PoC Released
GBHACKERS.COM — 30 Dec 2025
🐛
Patch Tuesday 2025 roundup: The biggest Microsoft vulnerabilities of the year
KEVCSOONLINE.COM — 30 Dec 2025
🐛
CVE-2023-52970 MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.
MSRC.MICROSOFT.COM — 30 Dec 2025
🐛
CVE-2025-68973 In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)
MSRC.MICROSOFT.COM — 30 Dec 2025
🐛
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
THEHACKERNEWS.COM — 30 Dec 2025
🐛
Critical IBM API Connect Flaw Allows Attackers to Bypass Authentication
GBHACKERS.COM — 30 Dec 2025
🐛
Critical SmarterMail Flaw Allows Attackers to Execute Remote Code
GBHACKERS.COM — 30 Dec 2025
🐛
CISA Alerts on Active Exploitation of MongoDB Vulnerability CVE-2025-14847
KEVGBHACKERS.COM — 30 Dec 2025
⚠️
6 cyber insurance gotchas security leaders must avoid
CSOONLINE.COM — 30 Dec 2025
⚠️
AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - ASW #363
YOUTUBE.COM — 2025-12-30
⚠️
8 Cybersecurity Acquisitions Surpassed $1 Billion Mark in 2025
SECURITYWEEK.COM — 30 Dec 2025
⚠️
Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks
SH.ITJUST.WORKS — 30 Dec 2025
⚠️
Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert – Hackread – Cybersecurity News, Data Breaches, AI, and More
SH.ITJUST.WORKS — 30 Dec 2025
⚠️
CISA orders feds to patch MongoBleed flaw exploited in attacks
KEVBLEEPINGCOMPUTER.COM — 30 Dec 2025
⚠️
Magecart Campaign Deploys 50+ Malicious Scripts to Hijack E-Commerce Transactions
GBHACKERS.COM — 30 Dec 2025
⚠️
ESET Flags Rising Threat of AI-Driven Malware and Ransomware
GBHACKERS.COM — 30 Dec 2025
⚠️
CISA Releases Two Industrial Control Systems Advisories
CISA.GOV — Tue, 30 Dec 25 1
📢
Sieben Anzeichen dafür, dass Ihr Cybersecurity-Framework überarbeitet werden muss
CSOONLINE.COM — 30 Dec 2025
📢
New Spear-Phishing Attack Targeting Security Individuals in the Israel Region
GBHACKERS.COM — 30 Dec 2025
📢
Automating Vendor Trust Issues
YOUTUBE.COM — 2025-12-30
📢
SmarterTools security advisory (AV25-866)
CYBER.GC.CA — 2025-12-30
🔥
EmEditor Website Breach Used to Spread Infostealer Malware
GBHACKERS.COM — 30 Dec 2025
🔥
Korean Air Data Compromised in Oracle EBS Hack
SECURITYWEEK.COM — 30 Dec 2025
🔥
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
THEHACKERNEWS.COM — 30 Dec 2025
🔥
New Google-Themed Phishing Wave Hits Over 3,000 Global Organisations – Hackread – Cybersecurity News, Data Breaches, AI, and More
SH.ITJUST.WORKS — 30 Dec 2025
🔥
Romanian energy provider hit by Gentlemen ransomware attack
SH.ITJUST.WORKS — 30 Dec 2025
🔥
US cybersecurity experts plead guilty to BlackCat ransomware attacks
BLEEPINGCOMPUTER.COM — 30 Dec 2025
🔥
European Space Agency confirms breach of "external servers"
BLEEPINGCOMPUTER.COM — 30 Dec 2025
🔥
Hackers Abuse Copilot Studio’s New Connected Agents Feature to Plant Backdoors
GBHACKERS.COM — 30 Dec 2025
🔥
European Space Agency confirms breach of "external servers"
SH.ITJUST.WORKS — 30 Dec 2025
🔥
New ErrTraffic service enables ClickFix attacks via fake browser glitches
BLEEPINGCOMPUTER.COM — 30 Dec 2025
🔥
SentinelOne and AWS Shape the Future of AI Security with Purple AI - SWN #542
YOUTUBE.COM — 2025-12-30
🕵️
Chinese APT Mustang Panda Caught Using Kernel-Mode Rootkit
SECURITYWEEK.COM — 30 Dec 2025
🕵️
Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
THEHACKERNEWS.COM — 30 Dec 2025
🕵️
Using AI-Generated Images to Get Refunds
SCHNEIER.COM — 2025-12-30
🕵️
27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
SH.ITJUST.WORKS — 30 Dec 2025
🕵️
Researchers Spot New Shai Hulud Variant - BankInfoSecurity
SH.ITJUST.WORKS — 30 Dec 2025
🕵️
New ConsentFix Technique Tricks Users Into Handing Over OAuth Tokens
KNOWBE4.COM — 30 Dec 2025
🕵️
Can You Trust Agentic AI?
YOUTUBE.COM — 2025-12-30
🕵️
Hackers Promote “VOID” AV Killer Claiming Kernel-Level Defense Evasion
GBHACKERS.COM — 30 Dec 2025
🕵️
Hackers Impersonated Jackson JSON Library to Infiltrate Maven Central
GBHACKERS.COM — 30 Dec 2025
🕵️
Chinese Hackers Deploy Rootkit to Stealthily Mask ToneShell Malware
GBHACKERS.COM — 30 Dec 2025
🕵️
AI's New Cyber Threats
YOUTUBE.COM — 2025-12-30
🕵️
The Strategic Imperative for OT/IT Convergence
PALOALTONETWORKS.COM — 30 Dec 2025
🌐
Zoom Stealer browser extensions harvest corporate meeting intelligence
BLEEPINGCOMPUTER.COM — 30 Dec 2025
📡
How to Integrate AI into Modern SOC Workflows
THEHACKERNEWS.COM — 30 Dec 2025