Service Account : Security Required to Keep a Service Account Safe CyberSecurity News CyberDefenderDecember 20, 2025December 20, 20254 mins0 A service account is a special type of account used by applications, services, or automated processes (not…continue reading..
ICSA-25-352-08 – Axis Communications Camera Systems Vulnerabilities AegironDecember 19, 2025December 20, 20255 mins0 ICSA-25-352-08 Axis Communications Camera Systems Release Date: December 19, 2025Severity: CriticalCVSS v3.1 Score: 9.0 Overview CISA has…continue reading..
ICSA-25-352-02 – Schneider Electric EcoStruxure Foxboro DCS Advisor Threat Advisories AegironDecember 19, 2025December 19, 20255 mins0 ICSA-25-352-02 Schneider Electric EcoStruxure Foxboro DCS Advisor Release Date: December 18, 2025Severity: CriticalCVSS v3.1 Score: 9.8 Overview…continue reading..
CVE-2025-68461: Exploiting SVG Animation to Hijack Roundcube Sessions Threat Advisories AegironDecember 19, 2025December 22, 202511 mins0 Vulnerability Summary Vulnerability Name: Cross-Site Scripting via SVG Animate TagCVE ID: CVE-2025-68461Severity: HighCVSS Score: 7.2CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:NCWE…continue reading..
CVE-2025-14733: Zero-Day IKEv2 Flaw Enabling Remote WatchGuard Firewall Takeover Threat Advisories AegironDecember 19, 2025December 19, 20259 mins0 Vulnerability Summary Vulnerability Name: Out-of-Bounds Write in iked ProcessCVE ID: CVE-2025-14733CVSS v3.1 Score: 9.3CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSeverity: CriticalExploitability:…continue reading..
“Sysmon Event IDs: A Practitioner’s Guide to Windows Telemetry” CyberSecurity News CyberDefenderDecember 19, 2025December 19, 20257 mins0 Event ID 1 — Process Create Windows Internals Advanced Fields Common Abuse Detection Notes Event ID 2…continue reading..
CVE-2025-12480: Zero-Day RCE Gladinet Triofox Access Flaw Enables Full SYSTEM Takeover of Exposed Servers Threat Advisories AegironDecember 19, 2025December 19, 202511 mins0 Vulnerability Summary Vulnerability Name: Gladinet Triofox Improper Access Control Leading to Remote Code ExecutionCVE ID: CVE-2025-12480CVSS Score:…continue reading..
Hidden in Plain Sight: How a Windows UI Flaw Enabled a Diplomatic PlugX Espionage Campaign Cyber Threat Intelligence AegironDecember 19, 2025December 19, 202519 mins0 Executive Summary Between mid-2025 and December 2025, a China-nexus threat actor tracked as UNC6384 conducted a sustained…continue reading..
Social Engineering : The Human Firewall, where Cybersecurity Fails First CyberSecurity News CyberDefenderDecember 19, 2025December 19, 20257 mins0 1. What Is Social Engineering? Social engineering is a type of cyberattack that manipulates people into revealing…continue reading..
ShadowPad Exploiting WSUS: How a Trusted Update Server Becomes a Silent Backdoor Malware AegironDecember 19, 2025December 19, 202511 mins0 Overview ShadowPad is a long-standing, advanced backdoor designed for stealth, persistence, and full remote control of compromised…continue reading..
