CVE-2025-67900 – Local Privilege Escalation Issue
CVE ID: CVE-2025-67900Vulnerability Type: Local Privilege Escalation (LPE)Severity: HighCVSS Score: 6.2 Overview This vulnerability was published recently…
continue reading..
Asus Supplier Breach: How Everest Ransomware Turned a Partner Into an Entry Point
Summary A company that supplies parts or technology to Asus was hit by a ransomware group called…
continue reading..
Oracle E-Business Suite Under Attack: How a Quiet Campaign Is Compromising Core Systems
Summary Over the last several weeks, attackers have been actively targeting Oracle E-Business Suite environments at scale.…
continue reading..
ChaosBot – Rust-Based Malware Using Discord for Command and Control
What is ChaosBot? ChaosBot is a newer piece of malware written in Rust that attackers are starting…
continue reading..
NightSpire Ransomware – Stealth Access, Data Theft, and Double Extortion
Overview NightSpire is a financially motivated ransomware operation that has noticeably ramped up activity in recent months.…
continue reading..
CastleRAT Active Campaign – Threat Overview, Detection, and Mitigation
What is CastleRAT CastleRAT is a Windows remote access trojan currently being used in the wild to…
continue reading..
SAP on High Alert: December 2025 Patch Day Fixes Three Critical, High-Impact Flaws
Release Date: December 10, 2025Patch Cycle: SAP Security Patch Day – December 2025Severity Level: CriticalAffected Areas: SAP…
continue reading..
Node.js Under the Microscope: December Security Update Fixes Multiple High-Risk Flaws
CVE ID(s): Not disclosed at the time of releaseOverall Severity: HighCVSS Score: Not yet publishedAffected Versions: 25.x,…
continue reading..
CVE-2025-58360 – Critical GeoServer WMS Vulnerability Actively Exploited in the Wild
Vulnerability Name: GeoServer WMS XML External Entity (XXE) VulnerabilityCVE ID: CVE-2025-58360Severity: CriticalCVSS Score: 8.2 – 9.8 (Critical)Status:…
continue reading..
