December 2025
2,743 clustered stories from December 2025, newest first.
December 2025 — page 25
100 of 2,743
- Tata Motors Exposes 70TB of Sensitive Data Due to Security Flaws
- Proton Launches Data Breach Observatory Amidst 300 Million Records Compromised
- APT24 Cyberespionage Campaign Utilizes BadAudio Malware Over Three Years
- Collaboration for Instant Borderless Payments in Global Transaction Banking
- Android Malware 'Fantasy Hub' Compromises SMS, Calls, and Contacts
- Pennsylvania AG Confirms Ransomware Data Breach by INC Group
- Cloudflare Outage Disrupts Major Internet Services
- US Congress Temporarily Extends Cybersecurity Information Sharing Act
- Ransomware Variants Target AWS S3 Misconfigurations
- UK MPs Urge Government Action on Cybersecurity Backstop
- Exploitation of XWiki Vulnerability Leads to Botnet Creation
- Critical Vulnerabilities in Git LFS Affect Fedora 42 and 43
- Coinbase Breach Timeline Disputed by Security Researcher
- CISA Issues Alert on Critical Lynx+ Gateway Vulnerability Exposing Data
- BreachLock and Vanta Integrate for Enhanced Security Testing and Compliance
- Ransomvibe Ransomware Discovered in VS Code Extensions
- Phishing Attack Targets New Haven Public Schools, Compromising Student Accounts
- Sneaky2FA Phishing Kit Enhances Tactics with Browser-in-the-Browser Functionality
- Norway Savings Bank Data Breach Exposes Customer Information
- Rise in Cybersecurity Threats: Phishing, Ransomware, and Identity Theft
- Critical Twonky Server Vulnerabilities Allow Authentication Bypass
- Detection Techniques for Outlook NotDoor Backdoor Malware Revealed
- Cisco IOS XE Vulnerability Exploited to Deploy BADCANDY Web Shell
- OWASP Top 10 List Updates Address Software Supply Chain Risks
- Multiple Spoofing Vulnerabilities in Dynamics 365 Field Service
- Perplexity Denies Comet RCE Vulnerability Claims Amid Silent Patch Evidence
- SolarWinds Releases Patches for Critical Serv-U Vulnerabilities
- Vulnerability Discovered in Imunify AI Malware Scanning Component
- New ClickFix Attack Targets Windows and macOS with Infostealer Malware
- Malware in Android Photo Frame App Enables Remote Device Control
- Balancer Suffers $128 Million Exploit Due to Smart Contract Vulnerability
- Critical Azure Bastion Vulnerability Allows Authentication Bypass and Privilege Escalation
- Wiltshire Police Data Breach Exposes Sensitive Information
- Cisco Firewalls Targeted by New Attack Variant Exploiting Critical Vulnerabilities
- Fortinet FortiWeb WAF Vulnerability Exploited by Attackers
- WhatsApp Vulnerability Exposes Data of 3.5 Billion Users
- Black Kite Launches Unified AI Risk Assessment Framework for MSSPs
- NVIDIA NeMo Framework Vulnerabilities Enable Code Injection and Privilege Escalation
- Cybersecurity Professionals Indicted for BlackCat Ransomware Attacks
- Keeper Security Launches Forcefield to Protect Against Memory Attacks
- Teens Plead Not Guilty in TfL Cyber Attack Case
- Fedora 41 and 43: Critical CVE Fixes for xorg-x11-server and Xwayland
- CIDeX 2025 Enhances Cyber Defense for Critical Infrastructure in Singapore
- CMMC 2.0 Enforcement Begins for Defense Contractors
- Apple Patches Over 100 Security Vulnerabilities in iOS and macOS
- Infostealer Malware Compromises Millions of Devices
- Multiple Vulnerabilities Identified in Microsoft Products (CVE-2025)
- Critical ASP.NET Vulnerability Impacts QNAP NetBak PC Agent
- Massive Data Leak Exposes 2 Billion Email Addresses and 1.3 Billion Passwords
- Somerville House Investigates Data Breach of Staff Notes
- Turing Institute Develops AI Tools for Cyber Defense of UK Infrastructure
- US Launches Strike Force Against Chinese and SE Asian Crypto Scammers
- Arctic Wolf Expands AI Security Operations with AWS Partnership
- Microsoft Integrates AI into Azure Firewall for Enhanced Security
- Data Breach at Miljödata Exposes Personal Information of 1.5 Million Swedes
- XWiki Vulnerability Targeted by Multiple Threat Actors
- Denial of Service Vulnerabilities in Ruby Rack Across Fedora Versions
- Salesforce Confirms Data Access Following Gainsight Breach
- Iberia Airline Data Leak: 77GB of Sensitive Information for Sale
- Cl0p Ransomware Group Targets Mazda in Oracle EBS Campaign
- APT Groups Target Construction Industry for Credential Theft
- Critical Authentication Bypass Flaw in JobMonster WordPress Theme Exploited
- Botnets Target PHP Servers and IoT Devices in Increased Cloud Attacks
- Healthcare Therapy Services, Inc. Data Breach Investigation
- Conduent Data Breach Affects Over 10.5 Million Individuals
- Threat Actors Exploit Blender Foundation Files for StealC V2 Infostealer Deployment
- Critical Microsoft SQL Server Vulnerability Enables Privilege Escalation
- Critical FFmpeg Denial of Service Vulnerability in Ubuntu Releases
- Government Websites Restored After Cyberattack Disruption
- Critical RCE Vulnerability in ImunifyAV Affects Millions of Linux Servers
- Multiple Vulnerabilities Discovered in Cybersecurity Software
- SonicWall Investigates State-Backed Breach of Cloud Backup Service
- Ongoing Exploitation of Cisco IOS XE Vulnerability with BadCandy Implant
- Data Breach at Central Jersey Medical Center Compromises Patient Information
- Imunify360 Vulnerability Exposes Millions of Websites to Code Execution Risks
- Everest Ransomware Group Breaches Iberia and Air Miles España
- E-commerce Dynamics Shift Consumer Power Balance
- Washington Post Data Breach Linked to Oracle E-Business Suite Exploit
- Russian Initial Access Broker Pleads Guilty in Yanluowang Ransomware Case
- Lancet Laboratories Fined for Multiple Data Breaches in South Africa
- Healthcare Sector Faces Increased Cyberattack Vulnerabilities
- High Incidence of Ransomware Attacks on Indian Firms in 2024
- Critical Remote Code Execution Vulnerabilities in Cisco Unified Contact Center Express
- Two British Teens Plead Not Guilty in TfL Cyberattack Case
- US Provides $1B Loan to Restart Three Mile Island Nuclear Reactor
- X-energy Secures $700M in Series D Funding for Small Modular Reactors
- Ransomware Attack Targets LG Energy Solution's Overseas Facility
- Atroposia RAT Emerges as New Cybercrime Tool on Dark Web
- Critical Vulnerabilities Found in IBM AIX and QRadar SIEM
- Data Breach Affects Over 200 Companies via Gainsight Integration with Salesforce
- Apple Releases iOS 26.1 and iPadOS 26.1 with Critical Security Fixes
- Critical Flaw in Zoho Analytics Plus Enables SQL Injection Attacks
- Exploitation of 7-Zip Vulnerability CVE-2025-11001 Confirmed
- Critical runC Vulnerabilities Enable Container Escape on Docker and Kubernetes
- NHS Scotland Invests £3m in AI Anti-Ransomware Software
- SitusAMC Data Breach Exposes Sensitive Financial Information
- Ireland Faces Increased Cyber Attack Risks, NCSC Reports
- Critical DoS Vulnerability in poppler Affects Multiple Ubuntu Releases
- Data Breach Exposes Financial Records of Conservative MPs
- Mozilla Firefox 145.0 Critical DoS Update Released for Fedora