December 2025
2,743 clustered stories from December 2025, newest first.
December 2025 — page 11
100 of 2,743
- Surge in Identity Breaches and Help Desk Hijacks Reported in UK
- Notepad++ Updater Compromised, Malware Installed on User PCs
- Valve's Steam Machine Limited by HDMI 2.0 Due to Open Source Issues
- Increase in Online Shopping Scams During Holiday Season
- DeadLock Ransomware Employs BYOVD Technique to Bypass Security
- Kaspersky Detects Surge in Daily Malicious Files Linked to Vulnerabilities in 2025
- Google Patches GeminiJack Zero-Click Exploit in Gemini Enterprise
- Adoption of Phishing-Resistant Authentication Grows in 2025
- Critical Vulnerability in Windows Cloud Files Mini Filter Driver Disclosed
- runZero Designated as CVE Numbering Authority
- NYC Congestion Pricing Reduces Air Pollution by 22% in Six Months
- Critical Windows Vulnerabilities Exploited Despite Patch Efforts
- Spiderman Phishing Kit Targets European Banks and Crypto Services
- Financial Crime Trends in 2026: AML, Fraud, and KYC Challenges
- Threat Actors Exploit AI Platforms to Distribute AMOS Stealer
- Data Breach Exposes Hospital Staff Sickness Records
- Australia Faces Surge in Cyber Incidents in FY2024-25
- Cybersecurity Tools Essential for Protecting Code and Enterprises in 2025
- Critical Vulnerability in Windows Defender Firewall Exposes Sensitive Data
- openSUSE Releases Security Updates for go1.24 and go1.25 Addressing Crypto Vulnerabilities
- U.S. Charges Ukrainian National for Role in Russian Cyberattacks
- Gemini Zero-Click Flaw Exposes Google Services to Attackers
- Critical Windows PowerShell 0-Day Vulnerability Disclosed
- Ivanti and Zoom Address Critical Security Vulnerabilities
- PeerBlight Malware Exploits React2Shell Vulnerability in Linux Systems
- Microsoft Outlook Vulnerability Allows Remote Code Execution
- Meesho's $606M IPO Marks Major Milestone in India's E-commerce
- Critical OS Command Injection Vulnerability in FortiSandbox Disclosed
- Fortinet Addresses Critical SSO Authentication Bypass Vulnerabilities
- Zensec Opens Australian Office Amid Rising Ransomware Threats
- WinRAR Vulnerability CVE-2025 Exploited by APT-C
- Ivanti EPM Vulnerability Allows Remote Code Execution
- European Commission Proposes Revisions to GDPR and Digital Rules
- ICS Patch Tuesday: Siemens, Rockwell, Aveva, Schneider Address Vulnerabilities
- Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching
- Ransomware Payments Total $734M in 2024 Amid Decline in Attacks
- Asus Data Breach: Everest Ransomware Group Claims Responsibility
- Major Data Breaches Affecting Banking, Legal, and Retail Sectors
- North Korea-linked EtherRAT Malware Exploits React2Shell Vulnerability
- UK Imposes Sanctions on Russian and Chinese Firms for Information Warfare
- Over 4 Million Browsers Infected by China-Based Spyware Campaign
- Trend Vision One Integrates with AWS Security Hub for Enhanced Cloud Security
- Adobe Products Vulnerabilities Enable Arbitrary Code Execution
- Vulnerabilities in Mozilla Products Enable Arbitrary Code Execution
- UTMStack Launches Open-Source Unified Threat Management Platform
- Hackers Exploit AWS IAM Eventual Consistency for Stealthy Persistence
- Tri-Century Eye Care Data Breach Affects 200,000 Patients and Employees
- Ubuntu 25.10: Netty HTTP Vulnerabilities Lead to Denial of Service Risks
- AI Agents Enhance Vulnerability Exploits in Key Industries
- Russian Forces Utilize Fog for Tactical Advantage in Pokrovsk
- Slackware 15.0 Updates Mozilla Firefox for Critical Security Fixes
- Exposed GitHub PATs Enable Cloud Environment Breaches
- New Guidance for Managing Customer Vulnerability in Financial Services
- Makop Ransomware Targets RDP Systems with Advanced Exploits
- Increased Cybersecurity Investments Amid Ransomware and Privacy Breaches
- AT&T Settles Data Breach Claims, Offers Up to $7,500 to Affected Customers
- Shift to Resilience in Cybersecurity Anticipated for 2026
- JS#SMUGGLER Malware Campaign Delivers NetSupport RAT via Multi-Stage Attack
- Organizations Boost Cybersecurity Investments Amid Rising Cyber Threats
- HSE Offers Compensation to Victims of 2021 Cyberattack
- UK Launches Cyber Runway CNI to Enhance Critical Infrastructure Security
- SAP Addresses Critical Vulnerabilities in December Security Update
- Europol's 2025 IOCTA Report on Cybercrime Trends
- DDoS Attacks Target Belgian Telecoms and Hospital
- Australia's Social Media Ban for Kids Begins December 10, 2025
- Windows 11 December 2025 Update Addresses 57 Vulnerabilities, Including Zero-Day Flaw
- Microsoft Outlook Vulnerability and Samsung Security Update Overview
- 10 Years of Let's Encrypt Certificates
- Linux Foundation Launches Agentic AI Foundation for AI Agent Standardization
- St. Bonaventure University Opens New Cyber Operations Center
- Critical DoS Vulnerability in python-apt Affects Multiple Ubuntu Releases
- Apache OpenOffice Denies Akira Ransomware Breach Claims
- NABU Alerts Citizens to Phishing Emails from Fake Domain nabu.org.ua
- 26000 New Zealanders Infected by Lumma Stealer Malware
- December 2025 Security Updates from Adobe and Microsoft
- Microsoft Releases December 2025 Windows 11 Security Updates
- Ruby SAML Vulnerability Allows Authentication Bypass
- Critical Code Injection Vulnerability in SAP Solution Manager Disclosed
- Porsche Vehicles in Russia Rendered Inoperable Due to Connectivity Issues
- SEO Manipulation Campaign Distributes Fake Microsoft Teams Installers
- CISA Issues Advisories for Industrial Control Systems Vulnerabilities
- Data Breach at Western Wayne Discovered on January 30, 2025
- Multiple Vulnerabilities in Windows RRAS Allow Remote Code Execution and Information Disclosure
- EU Investigates Google for Antitrust Violations in AI Content Use
- Increased Cybersecurity Investments Driven by Third-Party Risks and Ransomware
- CTERA Ransom Protect Achieves 100% Detection Against Ransomware
- Malicious VS Code Extensions Distribute Infostealers to Developers
- Malaysian Man Jailed for Creating Malware Scam Tutorials
- GOLD BLADE Ransomware Campaign Using QWCrypt Locker Identified
- VulnCheck Expands Leadership Team Amid Growing Demand for Exploit Intelligence
- Cofense Enhances Phishing Defense with AI and Smart Training
- Polish Police Arrest Three Ukrainians for Hacking Tools
- Vishing Attack Uses Microsoft Teams and QuickAssist to Spread .NET Malware
- Radare2 Memory Leak Vulnerabilities Discovered
- Singapore's Cyber Infrastructure Faces State Actor Threats
- Experts Discuss Cyber Attack Prevention Frameworks
- Prompt Injection Attack via Malicious MCP Servers Drains System Resources
- Malicious VS Code Extensions Exploit Microsoft Registry to Steal WiFi Passwords
- openSUSE Leap 15.6 Addresses PostgreSQL 13 Critical Vulnerabilities
- Huawei Releases December 2025 Security Patch for EMUI and HarmonyOS Devices