Hackers exploit Gladinet CentreStack cryptographic flaw in RCE attacks
12
Dec
2025

Hackers exploit Gladinet CentreStack cryptographic flaw in RCE attacks

Hackers are exploiting a new, undocumented vulnerability in the implementation of the cryptographic algorithm present in Gladinet’s CentreStack and Triofox products…

Charming Kitten Leak Reveals Key Operatives, Front Firms, and Massive Global Compromise
12
Dec
2025

Charming Kitten Leak Reveals Key Operatives, Front Firms, and Massive Global Compromise

The latest materials from the Charming Kitten network access reveal three significant findings that expand our understanding of Iran’s APT35…

Critical Gogs zero-day under attack, 700 servers hacked
12
Dec
2025

Critical Gogs zero-day under attack, 700 servers hacked

Critical Gogs zero-day under attack, 700 servers hacked Pierluigi Paganini December 11, 2025 Hackers exploited an unpatched Gogs zero-day, allowing…

Notepad++
12
Dec
2025

Notepad++ fixes flaw that let attackers push malicious update files

Notepad++ version 8.8.9 was released to fix a security weakness in its WinGUp update tool after researchers and users reported…

Hackers Are Using Shared AI Chats to Steal Your Passwords and Crypto
12
Dec
2025

Hackers Are Using Shared AI Chats to Steal Your Passwords and Crypto

A sophisticated malvertising campaign is exploiting ChatGPT and DeepSeek’s shared chat features to deliver credential-stealing malware to macOS users. Threat…

NBN Co puts a longer predictive lens on its digital twin ambitions
12
Dec
2025

NBN Co puts a longer predictive lens on its digital twin ambitions

NBN Co is hoping that its latest foray into digital twin technology will enable it to predict network performance and…

Google sues cybercriminal group Smishing Triad
12
Dec
2025

GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration

GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration Pierluigi Paganini December 11, 2025 Google fixed GeminiJack, a zero-click…

Warrant requirements, Democratic worries could factor into spy law renewal debate
11
Dec
2025

Warrant requirements, Democratic worries could factor into spy law renewal debate

A fresh effort is mounting in Congress to require federal agents to obtain a warrant before searching a government surveillance…

New “SOAPwn” .NET Flaws Expose Barracuda, Ivanti, and Microsoft
11
Dec
2025

New “SOAPwn” .NET Flaws Expose Barracuda, Ivanti, and Microsoft

Security researchers have unveiled a critical series of vulnerabilities in the .NET Framework’s HTTP client proxy architecture, dubbed “SOAPwn,” that…

NCSC Tests Honeypots and Cyber Deception Tools
11
Dec
2025

NCSC Tests Honeypots And Cyber Deception Tools

A study of honeypot and cyber deception technologies by the UK’s National Cyber Security Centre (NCSC) found that the deception…

Defence gives $84m IT support contract to Unisys
11
Dec
2025

Defence gives $84m IT support contract to Unisys

Defence has re-engaged Unisys to provide IT support services under an $84 million deal,  replacing current provider Fujitsu from March…

New ClickFix Attacks Exploit Official ChatGPT Website to Deliver macOS Infostealer
11
Dec
2025

New ClickFix Attacks Exploit Official ChatGPT Website to Deliver macOS Infostealer

Infostealers have become 2025’s fastest-growing cyberthreat, targeting all operating systems and regions with sophisticated social engineering tactics. In a new…