CVE-2025-68665: LangChain JS Serialization Injection via Trusted lc Object Spoofing Threat Advisories AegironDecember 24, 2025December 24, 20258 mins0 Overview CVE ID: CVE-2025-68665Product: LangChain (JavaScript / TypeScript ecosystem)Affected Area: Object serialization and deserialization (toJSON() and JSON.stringify())CVSS…continue reading..
CVE-2025-68664: When User Input Masquerades as Trusted LangChain Objects Threat Advisories AegironDecember 24, 2025December 24, 20259 mins0 Overview CVE ID: CVE-2025-68664Affected Product: LangChainVulnerability Type: Serialization Injection / Trust Boundary Bypass Affected Versions: CVSS v3.1…continue reading..
CVE-2025-68667: Unauthenticated Attackers Can Force Matrix Servers to Sign Fake Membership Events Threat Advisories AegironDecember 24, 2025December 24, 202510 mins0 Executive Summary CVE-2025-68667 is a high-risk security vulnerability affecting Continuwuity, a Matrix homeserver written in Rust. The…continue reading..
GhostLocker : Windows AppLocker weaponized to neutralize and control EDR Latest Cyber Attack CyberDefenderDecember 24, 2025December 24, 20255 mins0 GhostLocker is a new tool/technique revealed by researchers that shows how attackers can misuse Windows AppLocker —…continue reading..
CVE-2025-68669: Critical Remote Code Execution via Malicious Mermaid Diagrams in 5ire Threat Advisories AegironDecember 24, 2025December 24, 202510 mins0 Quick overview CVE ID: CVE-2025-68669Vulnerability name: 5ire Markdown / Mermaid Remote Code ExecutionSeverity: CriticalCVSS score: 9.6Risk level:…continue reading..
CVE-2025-68696: High-Risk Server-Side Request Forgery in httparty Ruby Library Threat Advisories AegironDecember 24, 2025December 24, 20258 mins0 Overview (At a Glance) What This Vulnerability Means This vulnerability allows an attacker to trick a server…continue reading..
Insider-Enabled SIM Swapping: Threat Model, IOCs, and Defensive Controls Latest Cyber Attack CyberDefenderDecember 24, 2025December 24, 20255 mins0 1. Executive Summary Criminal groups are increasingly recruiting organizational insiders via darknet forums to enable SIM swapping…continue reading..
JSCEAL Campaign Evolution – Technical Analysis Latest Cyber Attack CyberDefenderDecember 24, 2025December 24, 20256 mins0 Reporting Period: August 2025Threat Type: JavaScript-based malware delivery with multi-stage C2Primary Vector: Paid social media advertisingTarget Profile:…continue reading..
Malicious Crypto Miners Hide in Plain Sight Malware CyberDefenderDecember 24, 2025December 24, 20255 mins0 Miner malware (also called cryptomining malware or cryptojacking malware) is malicious software that secretly uses your device’s…continue reading..
WinRing0 : No Exploit Required and Kernel Takeover Malware CyberDefenderDecember 24, 2025December 24, 20255 mins0 WinRing0 is not inherently malware. It is a legitimate Windows kernel-mode driver (WinRing0x64.sys / WinRing0.sys) originally designed…continue reading..
