CVE-2025-68617: A High-Severity Use-After-Free in FluidSynth Vulnerabilities CyberDefenderDecember 25, 2025December 25, 20255 mins0 CVE-2025-68617 is a high-severity security vulnerability affecting FluidSynth, a widely used open-source software synthesizer that implements the…continue reading..
CVE-2025-68645: Local File Inclusion Vulnerability in Zimbra Collaboration Webmail Threat Advisories CyberDefenderDecember 25, 2025December 31, 20256 mins0 CVE Identifier: CVE-2025-68645Disclosure Date: December 22–23, 2025Severity: High to Critical (depending on scoring system)Affected Software: Zimbra Collaboration…continue reading..
CVE-2025-68614 – XSS in the Heart of Monitoring Vulnerabilities CyberDefenderDecember 25, 2025December 25, 20255 mins0 CVE-2025-68614 is a stored cross-site scripting (XSS) vulnerability affecting LibreNMS, an open-source network monitoring platform widely used…continue reading..
Payroll Pirates: How Help Desk Scams Are Hijacking Paychecks Latest Cyber Attack CyberDefenderDecember 25, 2025December 25, 20253 mins0 Payroll Pirate attacks are a form of scalable social engineering aimed at corporate HR and IT help…continue reading..
Loader to Stealer: Tracking Amadey’s GitLab-Based StealC Campaign Command and Control CyberDefenderDecember 25, 2025December 25, 20257 mins0 This article documents a malware campaign in which the Amadey loader is used to deploy the StealC…continue reading..
RansomHouse: When Data Theft Is the Ransom Latest Cyber Attack CyberDefenderDecember 25, 2025December 25, 202514 mins0 RansomHouse is a cyber-extortion group active since 2021. Unlike traditional ransomware gangs that rely on encrypting files,…continue reading..
Arcane Werewolf and the Stealth Infiltration of Russian Manufacturing Latest Cyber Attack CyberDefenderDecember 25, 2025December 25, 20256 mins0 Arcane Werewolf, sometimes discussed alongside the “Mythic Likho” campaign name, is a threat cluster reported by security…continue reading..
Goffee Cyberespionage Campaign: Technical Analysis of a Targeted Operation Against Russian Military and Defense Organizations Initial Access CyberDefenderDecember 25, 2025December 25, 20259 mins0 The Goffee cyberespionage group has conducted a targeted espionage campaign against Russian military personnel and defense-industry organizations.…continue reading..
M365 Device Code Phishing : When MFA Works Against You Initial Access CyberDefenderDecember 25, 2025December 25, 20259 mins0 UNK_AcademicFlare is a Russia-linked threat actor (the “UNK” prefix usually means unattributed / newly tracked) observed abusing…continue reading..
Tycoon Phishing Kit : How Phishing-as-a-Service Defeats Modern MFA Initial Access CyberDefenderDecember 24, 2025December 24, 20254 mins0 The Tycoon phishing kit is a commercial phishing-as-a-service (PhaaS) framework widely used to steal cloud identity credentials,…continue reading..
