This month in security with Tony Anscombe – December 2025 edition
As 2025 draws to a close, Tony looks back at the cybersecurity stories that stood out both in December and across the whole of this…
Author: Cybernoz
CISA orders feds to patch MongoBleed flaw exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to secure their systems against a high-severity MongoDB flaw that is actively being exploited…
Chinese Hackers Use Rootkit to Hide ToneShell Malware Activity
A Chinese-linked threat group tied to the HoneyMyte, also known as Mustang Panda or Bronze President, is using a new kernel rootkit to hide its…
The Top Cybersecurity Predictions For 2026
Dan Lohrmann, internationally recognized cybersecurity leader, technologist, keynote speaker and author covered “The Top 26 Security Predictions for 2026” in Government Technology this week. “Cybersecurity…
Oldest victim of Post Office scandal awarded OBE in New Year Honours 2026
Betty Brown, the oldest living victim of the Post Office scandal, was awarded an OBE in the 2026 New Year Honours List. She has been…
All Hong Kong retail banks to offer anti-scam service, locking cash in accounts
All of Hong Kong’s 28 retail banks, including virtual ones, will offer an anti-scam service from Wednesday that requires extra verification before money can be…
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems Pierluigi Paganini December 30, 2025 A Lithuanian national was arrested for allegedly spreading KMSAuto malware…
Critical Vulnerability in SmarterMail Let Attackers Execute Remote Code
SmarterTools has issued an urgent security advisory addressing a critical vulnerability in SmarterMail that could allow attackers to execute remote code on mail servers. The…
EmEditor Homepage Download Button Served Malware for 4 Days – Hackread – Cybersecurity News, Data Breaches, AI, and More
If you have downloaded the popular writing and coding tool EmEditor recently, you might want to double-check your computer. Between December 19 and December 22,…
CISA Warns of MongoDB Server Vulnerability(CVE-2025-14847) Exploited in Attacks
CISA has added a critical MongoDB Server vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that the flaw is being actively exploited in cyberattacks.…
Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to distribute a modular remote…
Top 10 technology ethics stories of 2025
Throughout 2025, Computer Weekly’s technology and ethics coverage highlighted the human and socio-technical impacts of data-driven systems, particularly artificial intelligence (AI). This included a number…