On December 11, 2025, GitHub, the world’s leading platform for software development collaboration, experienced a significant service disruption that left developers worldwide facing the frustrating […]
Year: 2025
React Server Components Flaws Risk DoS Attacks and Source Code Leaks; Urgent Patches Released
New React Server Components Vulnerabilities Expose Applications to DoS Attacks and Source Code Leaks In the wake of addressing the critical React2Shell vulnerability, the React […]
Critical OSGeo GeoServer Flaw Under Active Attack: CISA Urges Immediate Mitigation
Critical OSGeo GeoServer Vulnerability Under Active Exploitation: Immediate Action Required The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert concerning a critical […]
Windows RasMan Flaws Allow SYSTEM-Level Privilege Escalation; Urgent Patches Released
Critical Windows Remote Access Connection Manager Flaws Enable SYSTEM-Level Privilege Escalation On December 9, 2025, Microsoft disclosed two significant vulnerabilities within the Windows Remote Access […]
Critical Apache Struts 2 Vulnerability CVE-2025-64775 Threatens DoS Attacks; Urgent Upgrades Recommended
Critical Apache Struts 2 Vulnerability Exposes Servers to Denial-of-Service Attacks A significant security flaw has been identified in Apache Struts 2, a widely utilized web […]
Ashen Lepus Hacker Group Intensifies Cyber Attacks on Middle Eastern Diplomats with AshTag Malware
Ashen Lepus Hacker Group Targets Middle Eastern Diplomats with Sophisticated AshTag Malware A Hamas-affiliated cyber espionage group, known as Ashen Lepus or WIRTE, has intensified […]
MITRE Releases 2025 CWE Top 25: Cross-Site Scripting and Injection Flaws Dominate List of Dangerous Software Weaknesses
MITRE has unveiled its 2025 Common Weakness Enumeration (CWE™) Top 25 Most Dangerous Software Weaknesses list, highlighting the root causes behind 39,080 Common Vulnerability and […]
Cybercriminals Use Fake Leonardo DiCaprio Film to Spread Agent Tesla Malware via Torrents
Cybercriminals Exploit Fake Leonardo DiCaprio Movie to Spread Agent Tesla Malware In a sophisticated cyberattack, malicious actors are leveraging the anticipated release of Leonardo DiCaprio’s […]
New Phishing Kit BlackForce Bypasses Multi-Factor Authentication, Targets Major Brands with Sophisticated Attacks
BlackForce Phishing Kit: A New Threat Bypassing Multi-Factor Authentication In August 2025, cybersecurity experts identified a formidable phishing tool named BlackForce, which has since posed […]
NANOREMOTE Malware Exploits Google Drive API for Stealthy Windows System Infiltration
NANOREMOTE Malware Exploits Google Drive API to Infiltrate Windows Systems In October 2025, cybersecurity researchers identified a sophisticated Windows backdoor named NANOREMOTE, which poses a […]