Do Son A joint Hunt.io and Acronis report exposes the shared infrastructure behind Lazarus and Kimsuky, revealing the unified web of North Korean hacking.
Apache NiFi patches a High-severity flaw (CVE-2025-66524) in the GetAsanaObject processor. Unfiltered deserialization risks system compromise. Update now!
Kimsuky is deploying a new DOCSWAP RAT via QR codes and smishing. The DPRK-linked malware turns phones into surveillance tools for data theft.
A notorious cyber-espionage group known for terrorizing South American institutions has launched a new campaign against the...
BlueDelta (APT28) is targeting UKR.NET users with a sophisticated phishing campaign using ngrok and Mocky to bypass security and steal 2FA codes.
A High-severity flaw (CVE-2025-63387) in Dify v1.9.1 allows unauthenticated users to access sensitive system configurations via an unprotected API.
A maximum-severity HPE OneView flaw (CVE-2025-37164) bypasses auth to execute code via the ID Pools API. Upgrade to v11.00 or apply hotfixes now.
Meta "pauses" its Horizon OS partnership with ASUS and Lenovo, refocusing Reality Labs budgets on AI-powered smart glasses and first-party Quest hardware.
With 1.8 million infected Android TVs, Kimwolf issued 1.7 billion commands in 3 days, using Ethereum ENS to become a nearly un-killable cyber threat.
Microsoft’s new native NVMe I/O for Windows Server 2025 bypasses legacy SCSI paths, boosting IOPS by 70% while slashing CPU usage by 45%.
Amazon foils 1,800+ North Korean hacks, using a 110ms keystroke lag to expose a fake sysadmin operating from an Arizona "laptop farm."
cybernewswire
Torrance, United States / California, 19th December 2025, CyberNewsWire
Meta is testing a two-link monthly limit for unverified Facebook professional accounts, forcing creators to pay $14.99/mo to share external content.
OpenAI’s new App Directory lets ChatGPT summarize Dropbox files, order DoorDash, and manage Music directly, turning the AI into a true digital gateway.
Trump Media merges with Google-backed TAE Technologies in a $6B deal to build a 50MW fusion plant by 2026, targeting the AI energy boom.
FIFA reveals its first post-EA football game, launching exclusively on Netflix Games in 2026 with smartphone-based controls and a fresh, casual approach.
TikTok CEO Shou Zi Chew confirms a final deal to sell U.S. operations to an Oracle-led venture by January 22, 2026, ending the threat of a nationwide ban.
Linux logs its first Rust CVE (CVE-2025-68260): a race condition in the Android Binder driver causing kernel crashes. Fixed in 6.18.1 and 6.19-rc1.
Elastic patches a High-severity XSS flaw (CVE-2025-68385) in Kibana. Attackers can weaponize Vega visualizations to hijack sessions. Update now!
Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption
Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption
A new Log4j flaw (CVE-2025-68161) breaks TLS hostname verification, allowing Man-in-the-Middle attacks on log data. Upgrade to v2.25.3 now.
WatchGuard warns of an active CVSS 9.3 zero-day (CVE-2025-14733). Attackers are exploiting IKEv2 VPNs for root RCE. Patch and rotate secrets now!
A Headlamp flaw allows unauthenticated users to reuse cached credentials to hijack Kubernetes Helm operations. Update to v0.39.0!