New React Rsc Vulnerabilities Enable.Html
The React team has issued critical fixes addressing two new categories of vulnerabilities within React Server Components (RSC), which could lead to denial-of-service (DoS) or exposure of source cod...
ictsec.pl
NANOREMOTE, cousin of FINALDRAFT
In October 2025, security researchers uncovered NANOREMOTE, a sophisticated new Windows backdoor observed in telemetry. This fully-featured implant shares characteristics with malware detailed in R...
CISA Warns of Windows Cloud Files Mini Filter 0-Day Vulnerability Exploited in Attacks
CISA has issued a critical alert regarding an actively exploited zero-day vulnerability impacting the Microsoft Windows Cloud Files Mini Filter Driver. Tracked as CVE-2025-62221, this flaw is a use...
7 Best Security Awareness Training Platforms For MSPs in 2026
Managed service providers (MSPs) represent increasingly popular cyberattack targets, characterized by numerous endpoints and distributed networks that present adversaries with diverse exploitation ...
2025-12-14 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-14542 undefined - undefined ...
Stanford University pits cybersecurity researchers versus AI - should humans worry?
Stanford University has unveiled ARTEMIS, an autonomous AI agent platform designed for penetration testing, which recently underwent rigorous evaluation against human cybersecurity professionals an...
Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite
The Hamas-affiliated advanced persistent threat (APT), known as Ashen Lepus (also tracked as WIRTE), has launched a sophisticated espionage campaign targeting governmental and diplomatic entities a...
Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw
Google on Wednesday shipped security updates for its Chrome browser to address three security flaws, including one it said has come under active exploitation in the wild. However, a GitHub commit ...
Cracking ValleyRAT From Builder Secrets to Kernel Rootkits
The “Driver Plugin” contains an embedded kernel-mode rootkit that, in some cases, retains valid signatures and remains loadable on fully updated Windows 11 systems, bypassing built-in protection fe...
Multiple India-based CCTV Cameras
A critical vulnerability, CVE-2025-13607, has been identified in multiple India-based CCTV camera models from vendors D-Link, Sparsh Securitech, and Securus CCTV. Rated with a CVSS v4 score of 9.3 ...
Hackers say Volkswagen dealership’s client list is now for sale
A prominent cybercrime forum has become the platform for a threat actor claiming to have successfully breached Volkswagen Mandi, an official car dealership located in Himachal Pradesh, India. This ...
Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI
The FBI has issued a significant warning regarding a novel and disturbing virtual kidnapping scam. Threat actors are actively harvesting public Facebook photos to fabricate “proof-of-life” images i...
Poland arrests Ukrainians utilizing 'advanced' hacking equipment
Polish authorities have apprehended three Ukrainian nationals on suspicion of attempting to compromise critical IT systems and acquire sensitive national defense data within the country. The men, a...
New JS#SMUGGLER Campaign Drops NetSupport RAT Through Infected Sites
Securonix Threat Research has uncovered a sophisticated new malware campaign, dubbed JS#SMUGGLER, which is actively deploying the NetSupport Remote Access Trojan (RAT) through a multi-stage infecti...
Exploitation of React2Shell Surges
The vulnerability, dubbed React2Shell and officially tracked as CVE-2025-55182, can be exploited using specially crafted HTTP requests for unauthenticated remote code execution. The flaw impacts sy...
ChrimeraWire Trojan Fakes Chrome Activity to Manipulate Search Rankings
A new trojan identified as ChrimeraWire is actively manipulating search engine rankings for both Google and Bing by simulating legitimate user activity through a hidden instance of the Google Chrom...
Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features
Cybersecurity researchers detailed two new Android malware families, FvncBot and SeedSnatcher, alongside an upgraded ClayRat version. Findings from Intel 471, CYFIRMA, and Zimperium highlight growi...
US military contractor breach expose employee data
MAG Aerospace, military contractor for the US military in intelligence, surveillance and reconnaissance, suffered a breach exposing its employee data. According to MAG Aerospace, the company was al...
Portugal updates cybercrime law to exempt security researchers
Portugal has significantly updated its cybercrime law, introducing a crucial legal safe harbor for security researchers operating in good faith. This modification aims to exempt specific actions fr...
LockBit 5.0 Infrastructure Exposed in New Server, IP, and Domain Leak
LockBit 5.0 key infrastructure exposed, revealing the IP address 205.185.116.233, and the domain karma0.xyz is hosting the ransomware group’s latest leak site. According to researcher Rakesh Krish...