CVE-2025-68645: Local File Inclusion Vulnerability in Zimbra Collaboration Webmail Threat Advisories CyberDefenderDecember 25, 2025December 31, 20256 mins0 CVE Identifier: CVE-2025-68645Disclosure Date: December 22–23, 2025Severity: High to Critical (depending on scoring system)Affected Software: Zimbra Collaboration…continue reading..
CVE-2025-68614 – XSS in the Heart of Monitoring Vulnerabilities CyberDefenderDecember 25, 2025December 25, 20255 mins0 CVE-2025-68614 is a stored cross-site scripting (XSS) vulnerability affecting LibreNMS, an open-source network monitoring platform widely used…continue reading..
Part B: Hunting Frogblight: 25+ Detection Rules to Stop Turkish Android Banking Malware Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202532 mins1 Frogblight Malware Detection Rules YARA Rules Rule 1: Frogblight Core Detection yara Rule 2: Frogblight SMS Interception…continue reading..
Part A: Frogblight Uncovered: Inside the Turkish Android Banking Trojan Targeting Court and Aid Apps Cyber Threat Intelligence AegironDecember 25, 2025December 25, 202511 mins0 Overview: What Is Frogblight? Frogblight is a recently identified Android malware campaign that primarily targets mobile users…continue reading..
Payroll Pirates: How Help Desk Scams Are Hijacking Paychecks Latest Cyber Attack CyberDefenderDecember 25, 2025December 25, 20253 mins0 Payroll Pirate attacks are a form of scalable social engineering aimed at corporate HR and IT help…continue reading..
Loader to Stealer: Tracking Amadey’s GitLab-Based StealC Campaign Command and Control CyberDefenderDecember 25, 2025December 25, 20257 mins0 This article documents a malware campaign in which the Amadey loader is used to deploy the StealC…continue reading..
RansomHouse: When Data Theft Is the Ransom Latest Cyber Attack CyberDefenderDecember 25, 2025December 25, 202514 mins0 RansomHouse is a cyber-extortion group active since 2021. Unlike traditional ransomware gangs that rely on encrypting files,…continue reading..
Arcane Werewolf and the Stealth Infiltration of Russian Manufacturing Latest Cyber Attack CyberDefenderDecember 25, 2025December 25, 20256 mins0 Arcane Werewolf, sometimes discussed alongside the “Mythic Likho” campaign name, is a threat cluster reported by security…continue reading..
Goffee Cyberespionage Campaign: Technical Analysis of a Targeted Operation Against Russian Military and Defense Organizations Initial Access CyberDefenderDecember 25, 2025December 25, 20259 mins0 The Goffee cyberespionage group has conducted a targeted espionage campaign against Russian military personnel and defense-industry organizations.…continue reading..
M365 Device Code Phishing : When MFA Works Against You Initial Access CyberDefenderDecember 25, 2025December 25, 20259 mins0 UNK_AcademicFlare is a Russia-linked threat actor (the “UNK” prefix usually means unattributed / newly tracked) observed abusing…continue reading..
