Critical Gogs zero-day under attack, 700 servers hacked
Critical Gogs zero-day under attack, 700 servers hacked Pierluigi Paganini December 11, 2025 Hackers exploited an unpatched Gogs zero-day, allowing remote code execution and compromising…
Category: Securityaffairs
GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration
GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration Pierluigi Paganini December 11, 2025 Google fixed GeminiJack, a zero-click Gemini Enterprise flaw that could…
Google fixed a new actively exploited Chrome zero-day
Google fixed a new actively exploited Chrome zero-day Pierluigi Paganini December 11, 2025 Google addressed three vulnerabilities in the Chrome browser, including a high-severity bug…
Pro-Russia Hacktivist Support: Ukrainian Faces US Charges
Pro-Russia Hacktivist Support: Ukrainian Faces US Charges Pierluigi Paganini December 11, 2025 Ukrainian Victoria Dubranova, 33, faces US charges for aiding pro-Russia hacktivist groups CARR…
Fortinet fixed two critical authentication-bypass vulnerabilities
Fortinet fixed two critical authentication-bypass vulnerabilities Pierluigi Paganini December 10, 2025 Fortinet patched 18 flaws, including two authentication-bypass bugs affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager…
New EtherRAT backdoor surfaces in React2Shell attacks tied to North Korea
New EtherRAT backdoor surfaces in React2Shell attacks tied to North Korea Pierluigi Paganini December 10, 2025 NK-linked hackers are likely exploiting the React2Shell flaw to…
Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day
Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day Pierluigi Paganini December 10, 2025 Microsoft Patch Tuesday security updates for December…
U.S. CISA adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 10, 2025 U.S. Cybersecurity and Infrastructure Security Agency…
Ivanti warns customers of new EPM flaw enabling remote code execution
Ivanti warns customers of new EPM flaw enabling remote code execution Pierluigi Paganini December 09, 2025 Ivanti warns users to address a newly disclosed Endpoint…
Broadside botnet hits TBK DVRs, raising alarms for maritime logistics
Broadside botnet hits TBK DVRs, raising alarms for maritime logistics Pierluigi Paganini December 09, 2025 Mirai-based Broadside botnet targets vulnerable TBK Vision DVRs, posing a…
Polish Police arrest 3 Ukrainians for possessing advanced hacking tools
Polish Police arrest 3 Ukrainians for possessing advanced hacking tools Pierluigi Paganini December 09, 2025 Poland arrested three Ukrainian nationals accused of using hacking devices…
Crooks manipulate online photos to fuel virtual kidnapping ransoms
FBI: Crooks manipulate online photos to fuel virtual kidnapping ransoms Pierluigi Paganini December 08, 2025 The FBI warns of criminals altering images shared on social…