CVE-2025-23550 — Reflected Cross-Site Scripting (XSS) in WordPress “Product Puller” plugin Threat Advisories CyberDefenderDecember 30, 2025December 30, 20252 mins0 CVE-2025-23550 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the WordPress “Product Puller” plugin (developed by Kemal…continue reading..
CVE-2025-23554 vulnerability in Jakub Glos Off Page SEO allows Reflected XSS Threat Advisories CyberDefenderDecember 30, 2025December 30, 20252 mins0 CVE-2025-23554 is a high-severity security vulnerability classified as Improper Neutralization of Input During Web Page Generation —…continue reading..
January 2026 Countdown: Sweden’s NIS2 Cybersecurity Act CyberSecurity News CyberDefenderDecember 30, 2025December 30, 20256 mins0 The Cybersecurity Act (Swedish: Cybersäkerhetslagen) is Sweden’s national law transposing the EU’s NIS2 Directive into domestic legislation.…continue reading..
EDR Goes Blind: ToneShell Protected by a Kernel-Mode Rootkit Malware CyberDefenderDecember 30, 2025December 30, 20256 mins0 A China-linked advanced persistent threat (APT) — associated with Mustang Panda and also tracked as Hive0154 —…continue reading..
CVE-2025-15068 – Missing Authorization in Gmission Web Fax Threat Advisories CyberDefenderDecember 29, 2025December 29, 20258 mins0 Title: Missing Authorization in Gmission Web Fax (privilege abuse / session credential falsification)Published: 29 Dec 2025Severity: High…continue reading..
Apple Patches Two Zero-Day Vulnerabilities Actively Exploited in Targeted Attacks Threat Advisories CyberDefenderDecember 29, 2025December 29, 20254 mins0 Apple has released urgent security updates to address two zero-day vulnerabilities that were actively exploited in targeted…continue reading..
Security Advisory: Multiple High-Severity Vulnerabilities in Tenda WH450 Router Threat Advisories CyberDefenderDecember 29, 2025December 29, 20256 mins0 Multiple critical and high-severity vulnerabilities have been published affecting the Tenda WH450 router firmware (version 1.0.0.18) —…continue reading..
CVE-2025-15162: Deep Dive into a High-Risk Tenda WH450 Router Vulnerability Threat Advisories CyberDefenderDecember 29, 2025December 29, 20256 mins0 CVE-2025-15162 is a high-severity stack-based buffer overflow vulnerability affecting the Tenda WH450 router running firmware v1.0.0.18. The…continue reading..
Dumped MacBook Exposed Coupang’s Massive Data Breach Latest Cyber Attack CyberDefenderDecember 29, 2025December 29, 20255 mins0 South Korean authorities are investigating a major data breach at Coupang, after a former employee allegedly accessed…continue reading..
CVE-2025-15136 in TRENDnet TEW-800MB Threat Advisories CyberDefenderDecember 29, 2025December 29, 202512 mins0 CVE-2025-15136 is a remote command-injection vulnerability in the management web interface of the TRENDnet TEW-800MB (firmware v1.0.1.0).…continue reading..
