Microsoft Patches MSMQ Flaw That Affects IIS Web Servers
Microsoft has released an out-of-band security update to address a significant vulnerability in Message Queuing (MSMQ) functionality that impacts Windows 10 systems running IIS web…
Month: December 2025
Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks
Dec 19, 2025Ravie LakshmananCybercrime / Law Enforcement Authorities in Nigeria have announced the arrest of three “high-profile internet fraud suspects” who are alleged to have…
Post Office six years late to warn subpostmasters about Horizon defect
The Post Office has issued information and instructions to its branch network regarding an issue with Horizon, six years after it began “fobbing off” a…
ASRock, ASUS, GIGABYTE, MSI Boards vulnerable to pre-boot memory attacks
ASRock, ASUS, GIGABYTE, MSI Boards vulnerable to pre-boot memory attacks Pierluigi Paganini December 19, 2025 A new UEFI flaw exposes some ASRock, ASUS, GIGABYTE, and…
New critical WatchGuard Firebox firewall flaw exploited in attacks
WatchGuard has warned customers to patch a critical, actively exploited remote code execution (RCE) vulnerability in its Firebox firewalls. Tracked as CVE-2025-14733, this security flaw…
North Korean Hackers Make History with $2 Billion Crypto Heist in 2025
North Korean hackers reached a dangerous milestone in 2025, stealing a record-breaking $2.02 billion in cryptocurrency throughout the year. This represents a 51% increase from…
Targeted Phishing Attack Strikes HubSpot Users
Evalian’s Security Operations Centre has uncovered an active, sophisticated phishing campaign targeting HubSpot customers, combining business email compromise (BEC) tactics with website compromise to distribute…
China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web Manager
China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web Manager Pierluigi Paganini December 19, 2025 Cisco disclosed a critical zero-day…
Instacart to refund $60M over deceptive subscription tactics
Grocery delivery service Instacart will refund $60 million to settle FTC claims that it misled customers with false advertising and unlawfully enrolled them in paid…
University of Sydney Hacked – Students and Staff Data Exposed
The University of Sydney has confirmed a significant data breach affecting thousands of current and former staff members, as well as students and alums. In…
Amazon Identified North Korean IT Worker by Tracking Keystroke Activity
Amazon has uncovered a North Korean imposter posing as a U.S.-based systems administrator. The discovery was made not through traditional background checks but by analyzing…
WatchGuard 0-day Vulnerability Exploited in the Wild to Hijack Firewalls
An urgent security update has been released to fix a critical zero-day vulnerability in WatchGuard Firebox firewalls. With warnings that hackers are already actively exploiting…