A security incident involving React was reported in December 2025. See incident details, impact on customers, and recommended security measures.
Meta description: A data breach involving Tris Pharma was reported in December 2025. See incident details, impact on customers, and recommended security measures.
A data breach involving Barts Health NHS Trust was reported in December 2025. See incident details, impact on customers, and recommended security measures.
Meta description: A data breach involving Tris Pharma was reported in December 2025. See incident details, impact on customers, and recommended security measures.
Splunk disclosed high-severity vulnerabilities in Windows Enterprise and Universal Forwarder on Dec 3, 2025. See affected versions and remediation steps.
During the authors internship at Trail of Bits, they setup the tool wycheproof on a JavaScript library called elliptic. The idea behind this package is great: let's take a collection of known...
Yearn got hacked for a third time in its long history. The author of this post dove into how the exploit works and explains it. It's important to understand what's going on and not just bookmark...
Law enforcement action has accelerated and senators are taking new legislative action against a cybercrime movement whose raison d’être is sowing terror and chaos, where young victims are extorted...
Examines Russia-India-China trilateral cooperation, U.S. tariffs and sanctions, why a formal bloc is unlikely, and implications for governments and business.
Threat actors with ties to North Korea have likely become the latest to exploit the recently disclosed critical security React2Shell flaw in React Server Components (RSC) to deliver a previously...
Plus critical critical Notepad++, Ivanti, and Fortinet updates, and one of these patches an under-attack security hole Happy December Patch Tuesday to all who celebrate. This month's patch party...
The Patch Tuesday for December of 2025 includes 57 vulnerabilities, including two that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.” Microsoft...
Identity management vendors like Okta see an opening to calm CISOs worried about agents running amok The fear of AI agents running amok has thus far halted the wide deployment of these digital...
Four distinct threat activity clusters have been observed leveraging a malware loader known as CastleLoader, strengthening the previous assessment that the tool is offered to other threat actors...
Microsoft closed out the year with 1,139 total defects patched, making it the second-largest year in volume behind 2020, according to Trend Micro. The post Microsoft’s last Patch Tuesday of 2025...
The threat actor known as Storm-0249 is likely shifting from its role as an initial access broker to adopt a combination of more advanced tactics like domain spoofing, DLL side-loading, and...
Satellite silence trips immobilizers, leaving owners stuck Hundreds of Porsches in Russia were rendered immobile last week, raising speculation of a hack, but the German carmaker tells The...
Explore SentinelLABS' take on what 2026 may bring for cybersecurity, including emerging trends and actionable insights.
Zero Trust helps organizations shrink their attack surface and respond to threats faster, but many still struggle to implement it because their security tools don’t share signals reliably. 88% of...
Google on Monday announced a set of new security features in Chrome, following the company's addition of agentic artificial intelligence (AI) capabilities to the web browser. To that end, the tech...
Tom Leithauser writes: The Department of Defense would have to add new cybersecurity requirements to its contracts for telecom services when those services are used for “sensitive national...
The House will vote this week on two Republican-backed energy bills aimed at bolstering grid reliability by examining supply chain vulnerabilities and requiring states to maintain adequate...
Australia’s social media ban for children under 16 will come into effect this Wednesday, Dec. 10. Platforms such as TikTok, Instagram, Snapchat, and YouTube have already begun disabling users’...
State gaming regulators are looking to speed up the process for casinos and resorts to report cybersecurity incidents. Over the past five years, multiple properties have dealt with cyberattacks,...
Over at SuspectFile, Marco A. De Felice reports: Trumbull County (Ohio) was hit by a severe cyberattack in the first days of November 2025, carried out by the ransomware group Anubis. Despite...
Writing for Just Security in November, Michael Schmitt, Marko Milanovic, and Ryan Goodman set out the legal risks for U.S. allies that continue to provide intelligence related to the alleged...
The U.S. Energy Department is making up to $134 million available to projects that demonstrate the commercial viability of recovering and refining rare earths originating from mine tailings,...
States facing drought and dwindling groundwater supplies are seeking to pull back the curtain on water use at data centers, in a push for transparency that has scrambled traditional partisan...
Small drones have so far proven their utility in the commercial sector and on the modern battlefield, but even as the systems proliferate, most are still limited in one key area: the ability to...
Canadian organizations have emerged as the focus of a targeted cyber campaign orchestrated by a threat activity cluster known as STAC6565. Cybersecurity company Sophos said it investigated almost...