High-Risk XSS Flaws Expose Verisay Applications to Account Takeover and Data Theft Threat Advisories AegironDecember 26, 2025December 26, 20257 mins0 Vendor: Verisay Communication and Information Technology Industry and Trade Ltd. Co.Affected Products: Trizbi, Titarus, AidangoAffected Versions: All…continue reading..
High-Risk Router Vulnerabilities: Public Exploits Enable Remote Takeover of UTT 进取 512W Devices Threat Advisories AegironDecember 26, 2025December 26, 20256 mins0 Product: UTT 进取 512WAffected Versions: Up to 1.7.7-171114Attack Vector: Remote (unauthenticated in most cases)Impact: Remote Code Execution…continue reading..
Unsecured Credentials (T1552): The Simplest Path to Total Compromise Credential Access CyberDefenderDecember 26, 2025December 26, 20258 mins0 Unsecured Credentials (T1552) is one of the most abused techniques in the Credential Access tactic of the…continue reading..
CVE-2025-68615: Critical Remote Code Execution Risk in Linux SNMP Trap Service Threat Advisories AegironDecember 26, 2025December 26, 202511 mins0 Vulnerability Summary Field Value CVE ID CVE-2025-68615 CVE Name Net-SNMP snmptrapd Stack-Based Buffer Overflow CVSS Score 9.8…continue reading..
Living Off the Cloud: Threat Actors Exploiting .onmicrosoft.com Latest Cyber Attack CyberDefenderDecember 26, 2025December 26, 20254 mins0 What is .onmicrosoft.com? .onmicrosoft.com is the default domain automatically assigned when someone creates a tenant in Microsoft’s…continue reading..
MacSync Stealer’s New Tricks: How macOS Malware Is Getting More Sophisticated Latest Cyber Attack CyberDefenderDecember 26, 2025December 26, 20258 mins0 In the ever-changing landscape of cybersecurity threats, macOS users have long believed their systems to be relatively…continue reading..
CVE-2020-12812 — FortiOS SSL VPN : Active exploitation in the wild of this older vulnerability Vulnerabilities CyberDefenderDecember 26, 2025December 26, 20253 mins0 CVE-2020-12812 is a critical authentication bypass vulnerability in the SSL VPN component of FortiOS, the operating system…continue reading..
Massive Spotify Music Scrape Exposed: Inside Anna’s Archive’s 300TB Data Release Latest Cyber Attack CyberDefenderDecember 26, 2025December 26, 20255 mins0 A group known as Anna’s Archive—previously recognized for hosting and distributing large-scale “shadow libraries” of books and…continue reading..
CVE-2025-14847: A Critical MongoDB Vulnerability Demanding Immediate Action Vulnerabilities CyberDefenderDecember 26, 2025December 26, 20256 mins0 At its core, CVE-2025-14847 is a memory disclosure vulnerability caused by improper handling of zlib-compressed protocol headers.…continue reading..
Your AI Security Team Is Training on Last Year’s Attack Patterns — While Attackers Are Writing This Year’s Tomorrow CyberSecurity News AegironDecember 26, 2025December 26, 202514 mins0 The Tug of War: Your AI Security Team Trains on Yesterday’s Attacks While Hackers Deploy Tomorrow’s The…continue reading..
