A newly disclosed critical vulnerability in Apache Tika could allow attackers to compromise servers by simply uploading a malicious PDF file, according to a security advisory published by Apache maintainers. Tracked as CVE-2025-66516, the flaw affects Apache Tika core, Apache Tika parsers, and the Apache Tika PDF…
Category: EN
MuddyWater Hackers Use UDPGangster Backdoor to Bypass Network Defenses on Windows
The MuddyWater threat group has escalated its cyber espionage operations by deploying UDPGangster, a sophisticated UDP-based backdoor designed to infiltrate Windows systems while systematically evading traditional network defenses. Recent intelligence gathered by FortiGuard Labs reveals coordinated campaigns targeting high-value victims…
Threat Actors Distribute CoinMiner Malware through USB Drives to Infect Workstations
Cybercriminals continue to exploit USB drives as infection vectors, with recent campaigns delivering sophisticated CoinMiner malware that establishes persistent cryptocurrency-mining operations on compromised workstations. Security researchers have documented an evolving threat that leverages social engineering and evasion techniques to avoid…
Avast Antivirus Sandbox Vulnerabilities Allow Privilege Escalation
SAFA researchers uncovered four kernel heap overflow vulnerabilities in Avast Antivirus’s aswSnx.sys driver, designated CVE-2025-13032, affecting versions before 25.3 on Windows. These flaws originate from double-fetch issues in IOCTL handling, allow local attackers to trigger pool overflows for privilege escalation…
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors…
Cloudflare Outage Caused by React2Shell Mitigations
The critical React vulnerability has been exploited in the wild by Chinese and other threat actors. The post Cloudflare Outage Caused by React2Shell Mitigations appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Cloudflare…
Hackers Weaponize Trusted IT Tools for Full System Control
Malicious actors are weaponizing legitimate Remote Monitoring and Management (RMM) tools, turning trusted IT software into a means for unauthorized system access. This strategy represents a significant shift from traditional malware attacks, as it exploits programs like LogMeIn Resolve…
Sha1-Hulud Malware Returns With Advanced npm Supply-Chain Attack Targeting Developers
A new wave of the Sha1-Hulud malware campaign has unfolded, indicating further exacerbation of supply-chain attacks against the software development ecosystem. The recent attacks have hit the Node Package Manager, or npm, one of the largest open-source package managers…
Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability
Two hacking groups with ties to China have been observed weaponizing the newly disclosed security flaw in React Server Components (RSC) within hours of it becoming public knowledge. The vulnerability in question is CVE-2025-55182 (CVSS score: 10.0), aka React2Shell, which…
Criminal IP to Host Webinar: Beyond CVEs – From Visibility to Action with ASM
Torrance, California, USA, 5th December 2025, CyberNewsWire This article has been indexed from Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More Read the original article: Criminal IP to Host Webinar: Beyond CVEs – From Visibility to Action…
Google Rolls Out Chrome 143 Update for Billions Worldwide
Chrome 143 fixes 13 security vulnerabilities, including four high-severity flaws, in a December desktop update rolling out to Windows, macOS, and Linux users. The post Google Rolls Out Chrome 143 Update for Billions Worldwide appeared first on TechRepublic. This article…
Petco confirms security lapse exposed customers’ personal data
The pet company has published almost no details about what happened, who was affected, and what personal data was exposed. This article has been indexed from Security News | TechCrunch Read the original article: Petco confirms security lapse exposed customers’…
Asus supplier hit by ransomware attack as gang flaunts alleged 1 TB haul
Laptop maker says a vendor breach exposed some phone camera code, but not its own systems Asus has admitted that a third-party supplier was popped by cybercrims after the Everest ransomware gang claimed it had rifled through the tech titan’s…
Marquis Breach Hits Over 780,000 People
Marquis is a fintech and software company based in Texas that supplies data-driven marketing, customer data platforms, analytics, and compliance solutions The post Marquis Breach Hits Over 780,000 People first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
ASUS Confirms Vendor Breach By Everest
ASUS has confirmed a data breach affecting a third-party supplier, which resulted in the exposure of some source code. This confirmation follows a leak The post ASUS Confirms Vendor Breach By Everest first appeared on CyberMaterial. This article has been…
Hackers Accused Of Wiping 96 Databases
Twin brothers Muneeb and Sohaib Akhter, both 34, have been charged by U.S. prosecutors with computer fraud, destruction of records, The post Hackers Accused Of Wiping 96 Databases first appeared on CyberMaterial. This article has been indexed from CyberMaterial Read…
PRC Hackers Use BrickStorm In US
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently disclosed technical details about a backdoor named BRICKSTORM, which is being utilized The post PRC Hackers Use BrickStorm In US first appeared on CyberMaterial. This article has been indexed from CyberMaterial…
NCSC Warns Orgs Of Exposed Device Flaws
The UK’s National Cyber Security Center, known as the NCSC, has initiated a testing phase for a new security offering called Proactive Notifications. The post NCSC Warns Orgs Of Exposed Device Flaws first appeared on CyberMaterial. This article has been…
From Idea to Proof of Concept to MVP: The Idea stage (1/3)
Contents Toggle Legend 1. The Idea Stage What Makes This Stage Unique Inputs and Outputs Actors Engineering Expectations at This Stage Security and Privacy This is a a developer focused guide in three parts to evolving code, architecture, and processes…
Beijing-linked hackers are hammering max-severity React bug, AWS warns
State-backed attackers started poking flaw as soon as it dropped – anyone still unpatched is on borrowed time Amazon has warned that China-nexus hacking crews began hammering the critical React “React2Shell” vulnerability within hours of disclosure, turning a theoretical CVSS-10…