December 2025
2,743 clustered stories from December 2025, newest first.
December 2025 — page 26
100 of 2,743
- ASUS Issues Critical Security Alerts for AiCloud and DSL Routers
- Operation WrtHug Compromises 50,000+ ASUS Routers for Botnet
- Gentoo: High Risk Arbitrary Code Execution Vulnerabilities in qtsvg and UDisks
- VITAS Hospice Services Data Breach Exposes Patient Information
- Iberia Data Breach Exposes Customer Information via Supplier Incident
- Jupyter Misconfiguration Vulnerability Enables Root Privilege Escalation
- Critical Vulnerabilities Found in Fluent Bit Logging Tool
- Data Breach at SitusAMC Exposes Client Information of Major US Banks
- Critical Denial of Service Vulnerabilities in Lasso Affecting Ubuntu Releases
- Supply Chain Breaches Affect 97% of Organizations in 2025
- Microsoft Issues Emergency Update for Windows 10 Security Flaws
- CredShields Partners with Checkmarx for Enhanced Smart Contract Security
- PowerSchool Cyberattack Affects Millions of Canadians
- W3 Total Cache Vulnerability Exposes Over 1 Million WordPress Sites to RCE
- Fluent Bit Vulnerabilities Enable Remote Attacks on Cloud Infrastructure
- Mass Student Data Breach Affects 5.2 Million Canadians
- AHA and FBI Alert on $244M Ransomware Group Targeting Healthcare
- Nevada Declines Ransom After Cyberattack Compromises State Systems
- Ransomware Threats Target Financial Services with Evolving Tactics
- Hackers Exploit Triofox 0-Day Vulnerability to Deploy Malicious Payloads
- vLLM Vulnerability Allows Remote Code Execution via Malicious Payloads
- Critical Windows Graphics Vulnerability Allows Remote Control via Image
- Gootloader Malware Resurfaces, Compromises Domain Controllers
- Major Data Breach Affects Leading Tech Firm and Global Software Systems
- SUSE and openSUSE Address Multiple grub2 Vulnerabilities
- Alpha Omega Winery Ransomware Attack Exposes Personal Data
- Halcyon Joins CISA's Cyber Defense Collaborative Against Ransomware
- Metasploit Adds Exploit for FortiWeb 0-Day Vulnerabilities
- Logitech Investigates Cybersecurity Incident Involving Zero-Day Vulnerability
- Logitech Data Leak Following Zero-Day Attack
- Eurofiber Data Breach: User Data Exfiltrated via Security Vulnerability
- Monsta FTP Remote Code Execution Vulnerability CVE-2025-34299
- ShadowRay 2.0 Exploits Flaw in Open Source Ray Framework
- Indian Govt Issues Security Alert for Android 16 Users Amid Vulnerabilities
- Critical RCE Vulnerability in React Native CLI Exposes Millions of Developers
- Major Cyberattack in Poland Targets Loan Platform, Stealing User Data
- Massive Power Outage Affects Spain, Portugal, and France
- Russia and North Korea Collaborate in Cyber Operations
- Kaspersky Reports $18 Billion Manufacturing Losses from Ransomware in 2025
- WhatsApp Malware Campaign Targets Brazilian Crypto Users
- Google Releases Emergency Update for Chrome to Address RCE Vulnerabilities
- Russian Forces Exploit Weather to Breach Ukrainian Defenses
- Ransomware Threats Surge in Healthcare Sector
- SAP Addresses 18 Vulnerabilities in Latest Security Update
- NOFX AI Vulnerability Exposes API Keys and Private Wallets
- Hacktivists Target Canadian Critical Infrastructure with ICS Attacks
- Data Breach at Queensland Girls School Exposes Student Information
- Nevada Ransomware Attack Linked to Employee's Malware Download
- Windows Graphics Vulnerabilities Enable Remote Code Execution
- Critical Grafana Vulnerability Allows Privilege Escalation
- Remote Code Execution Flaw Found in Glob File Matching Library
- New Android Malware 'Sturnus' Steals Banking Credentials and Encrypted Chats
- St. Anthony Hospital Data Breach Exposes Personal Information of Over 6,600 Individuals
- North Korean Kimsuky and Lazarus Collaborate on Zero-Day Exploits
- AI-Powered Cyber Attack Marks New Era in Cyber Warfare
- Critical RCE Vulnerabilities in AI Frameworks Affect Meta, Nvidia, and Microsoft
- Multiple Vulnerabilities in Windows RRAS Expose Systems to Attacks
- Kraken Ransomware Targets Windows, Linux, and VMware ESXi Systems
- Cybercriminal Network 'The COM' Launches Global Cyberattacks
- Kenyan Government Websites Defaced in Cyberattack with Racist Messages
- Critical Dell Data Lakehouse Vulnerability Enables Remote Privilege Escalation
- CodeRED App Data Breach Affects Coloradans' Personal Information
- Surge in DDoS Attacks Against EU Public Administration by Hacktivists
- Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed
- UAE Cybersecurity Council Issues Warning on Zero-Day WhatsApp Attack
- Clop Ransomware Group Breaches The Washington Post
- Somalia's E-Visa System Data Breach Exposes 35,000 Personal Records
- Critical Vulnerability in WatchGuard Fireware OS Exposed to Remote Attacks
- Chinese Hackers Exploit Windows Zero-Day to Target European Diplomats
- Integrated Approach Essential for Cybersecurity in Critical Infrastructure
- Critical RCE Vulnerability in expr-eval npm Library Affects AI Applications
- Surge in Cyberattacks Targeting IoT and Mobile Devices in Critical Industries
- Critical UniFi OS Vulnerability Allows Remote Code Execution
- W3 Total Cache Plugin Vulnerability Exposes Over One Million WordPress Sites
- Chinese Hackers Exploit Windows Zero-Day to Target European Diplomats
- APT24 Expands Cyberespionage with BadAudio Malware via Supply Chain Attacks
- Dartmouth College Data Breach Linked to Clop's Oracle EBS Exploit
- Ransomware Threats in Healthcare: 2025 Overview
- Sandworm Hackers Target Ukraine's Grain Sector with Data-Wiping Malware
- Amazon Reports Exploitation of Cisco ISE and Citrix NetScaler Zero-Days
- Critical Remote Code Execution Vulnerability in Monsta FTP Discovered
- Critical Grafana SCIM Vulnerability Allows Privilege Escalation
- Critical RCE Vulnerabilities in libcupsfilters Affect Ubuntu Releases
- Zero-Day Options Strategies Impacting Stock Market Rally
- DoorDash Data Breach Exposes User Information Due to Social Engineering Attack
- Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability
- F5 BIG-IP Security Breach Exposes Critical Infrastructure Risks
- Fortinet Discovers New Zero-Day Vulnerability Under Exploitation
- Clop Ransomware Targets UK NHS Using Oracle Zero-Day Exploits
- RCE Vulnerabilities Discovered in Major AI Inference Frameworks
- SAP Addresses Critical SQL Anywhere Monitor Vulnerability
- QNAP Patches Seven Critical Zero-Day Vulnerabilities Post Pwn2Own 2025
- Multiple OpenJDK Vulnerabilities Discovered in Ubuntu 25.10 and Derivatives
- DDoS Cyberattack Disrupts Danish Government and Defense Websites
- Lazarus APT Group Launches ScoringMathTea RAT with Enhanced Capabilities
- Cyberattack Closes Manassas City Public Schools
- RondoDox Botnet Expands by Exploiting Unpatched XWiki RCE Flaw
- Everest Ransomware Group Breaches Under Armour, Exposing 343 GB of Data
- Critical Security Fix for Skopeo in Fedora 42 and 43
- JFrog Discovers Critical React Vulnerability in Software Supply Chains