SecurityTicks

Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability 

cyber news, vulnerability, vulnerability management /

Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability  2025-12-10 at 08:53 By Ashish Khaitan The vulnerability disclosure cycle has entered a new era, one where the gap between publication and weaponization is measured in minutes, not days. It has been confirmed that China-nexus threat actors began actively exploiting a critical React Server Components flaw, React2Shell, […]

Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability  Read More »

Australia Releases National AI Plan to Guide Adoption

ANZ, cyber news, cybersecurity /

Australia Releases National AI Plan to Guide Adoption 2025-12-10 at 08:53 By Ashish Khaitan The Albanese government has released Australia’s National AI Plan, establishing a coordinated framework to guide the adoption, governance, and development of artificial intelligence-related tech across the country. The plan is designed to ensure that technology serves people, supports economic growth, and strengthens Australia’s position in the

Australia Releases National AI Plan to Guide Adoption Read More »

V3G4 Botnet Evolves: From DDoS to Covert Cryptomining

botnet, Cryptominer, Malware, Mirai, V3G4 /

V3G4 Botnet Evolves: From DDoS to Covert Cryptomining 2025-12-10 at 08:53 By rohansinhacyblecom Executive Summary Cyble Research & Intelligence Labs (CRIL) has identified an active Linux-targeting campaign that deploys a Mirai-derived botnet, paired with a stealthy, fileless-configured cryptominer. The threat actor employs a multi-stage infection chain starting with a downloader that delivers architecture-specific V3G4 binaries

V3G4 Botnet Evolves: From DDoS to Covert Cryptomining Read More »

Ransomware and Supply Chain Attacks Neared Records in November 

cyber news, darkweb, Ransomware, Ransomware Insights /

Ransomware and Supply Chain Attacks Neared Records in November  2025-12-10 at 08:52 By Paul Shread Ransomware attacks hit their second-highest levels on record in November, as the number of attacks rose for the seventh consecutive month.  The 640 ransomware attacks recorded by Cyble in November 2025 are second only to February 2025’s record totals (chart below).  Ransomware groups are increasingly targeting software supply chain vulnerabilities, which has contributed to a doubling of supply chain attacks since April

Ransomware and Supply Chain Attacks Neared Records in November  Read More »

The hidden dynamics shaping who produces influential cybersecurity research

cybersecurity, Don't miss, Features, Hot stuff, News, research /

The hidden dynamics shaping who produces influential cybersecurity research 2025-12-10 at 08:52 By Mirko Zorz Cybersecurity leaders spend much of their time watching how threats and tools change. A new study asks a different question, how has the research community itself changed over the past two decades. Researchers from the University of Southampton examined two

The hidden dynamics shaping who produces influential cybersecurity research Read More »

UTMStack: Open-source unified threat management platform

cybersecurity, Don't miss, GitHub, News, open source, software, Threat Intelligence /

UTMStack: Open-source unified threat management platform 2025-12-10 at 08:52 By Sinisa Markovic UTMStack is an open-source unified threat management platform that brings SIEM and XDR features into one system. The project focuses on real time correlation of log data, threat intelligence, and malware activity patterns gathered from different sources. The goal is to help organizations

UTMStack: Open-source unified threat management platform Read More »

LLMs are everywhere in your stack and every layer brings new risk

Artificial Intelligence, Don't miss, DryRun Security, LLMs, News, OWASP, report /

LLMs are everywhere in your stack and every layer brings new risk 2025-12-10 at 07:52 By Mirko Zorz LLMs are moving deeper into enterprise products and workflows, and that shift is creating new pressure on security leaders. A new guide from DryRun Security outlines how these systems change long standing assumptions about data handling, application

LLMs are everywhere in your stack and every layer brings new risk Read More »

Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday

Uncategorized /

Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday 2025-12-10 at 07:02 By Jessica Lyons Plus critical critical Notepad++, Ivanti, and Fortinet updates, and one of these patches an under-attack security hole Happy December Patch Tuesday to all who celebrate. This month’s patch party includes one Microsoft flaw under exploitation, plus two

Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday Read More »

Letting Nvidia sell H200s to China is closing the door after the horse has bolted

Uncategorized /

Letting Nvidia sell H200s to China is closing the door after the horse has bolted 2025-12-10 at 07:02 By Tobias Mann US export controls on AI accelerators have only succeeded in forcing China to develop its own tech Half a decade of US trade policy aimed at denying China access to America’s most potent semiconductor

Letting Nvidia sell H200s to China is closing the door after the horse has bolted Read More »

Building SOX compliance through smarter training and stronger password practices

CISO, Compliance, Don't miss, Hot stuff, News, password management, Passwork, SOX /

Building SOX compliance through smarter training and stronger password practices 2025-12-10 at 07:00 By Sinisa Markovic A SOX audit can reveal uncomfortable truths about how a company handles access to financial systems. Even organizations that invest in strong infrastructure often discover that everyday password habits weaken the controls they thought were solid. CISOs know that

Building SOX compliance through smarter training and stronger password practices Read More »

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

Uncategorized /

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws 2025-12-10 at 06:50 By Fortinet, Ivanti, and SAP have moved to address critical security flaws in their products that, if successfully exploited, could result in an authentication bypass and code execution. The Fortinet vulnerabilities affect FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager and relate

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws Read More »

Bitcoin FOMO trickles back at $94K, but Fed could spoil the party

Uncategorized /

Bitcoin FOMO trickles back at $94K, but Fed could spoil the party 2025-12-10 at 05:46 By Cointelegraph by Martin Young Bitcoin surged to $94,625, its highest in three weeks, as positive social sentiment returned, but comments from the Fed on Wednesday could put it back on shaky ground. This article is an excerpt from Cointelegraph.com

Bitcoin FOMO trickles back at $94K, but Fed could spoil the party Read More »

Trump to begin interviews with Fed chair finalists this week: FT

Uncategorized /

Trump to begin interviews with Fed chair finalists this week: FT 2025-12-10 at 05:38 By Cointelegraph by Brian Quarmby Treasury Secretary Scott Bessent has presented four names to the White House, with the list reportedly including former Fed governor Kevin Warsh and frontrunner Kevin Hassett. This article is an excerpt from Cointelegraph.com News View Original

Trump to begin interviews with Fed chair finalists this week: FT Read More »

UK Sanctions Russian and Chinese Firms Suspected of Being ‘Malign Actors’ in Information Warfare

China, Cyberwarfare, Russia /

UK Sanctions Russian and Chinese Firms Suspected of Being ‘Malign Actors’ in Information Warfare 2025-12-10 at 04:31 By Associated Press Britain and its allies face escalating “hybrid threats … designed to weaken critical national infrastructure, undermine our interests and interfere in our democracies.” The post UK Sanctions Russian and Chinese Firms Suspected of Being ‘Malign

UK Sanctions Russian and Chinese Firms Suspected of Being ‘Malign Actors’ in Information Warfare Read More »

Datacenters buy Boom Supersonic a ticket to revive fast air transport

Uncategorized /

Datacenters buy Boom Supersonic a ticket to revive fast air transport 2025-12-10 at 03:45 By Simon Sharwood Adapts its engines to power bit barns, and lands cash to fund its takeoff roll Boom Supersonic, the company that hopes to revive faster-than-sound air travel, has diverted into the datacenter power business.… This article is an excerpt

Datacenters buy Boom Supersonic a ticket to revive fast air transport Read More »

Scroll to Top