SecurityTicks

FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE 2025-12-15 at 18:02 By Multiple security vulnerabilities have been disclosed in the open-source private branch exchange (PBX) platform FreePBX, including a critical flaw that could result in an authentication bypass under certain configurations. The shortcomings, discovered by Horizon3.ai and reported to the project maintainers […]

Roomba maker iRobot gets cleaned out in Chapter 11 2025-12-15 at 15:06 By Connor Jones Company vacuumed up by its own manufacturer iRobit, the company behind autonomous vacuum cleaner brand Roomba, has filed for Chapter 11 bankruptcy protection, telling investors that its Chinese manufacturer will assume control going forward.… This article is an excerpt from […]

Delay to European Central Bank messaging project cost the Bank of England £23M 2025-12-15 at 15:06 By Lindsay Clark Watchdog links schedule change to replanning of UK payments system overhaul The European Central Bank’s (ECB) decision to delay its move to a new messaging standard in 2022 ended up costing the Bank of England £23 […]

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More 2025-12-15 at 14:37 By If you use a smartphone, browse the web, or unzip files on your computer, you are in the crosshairs this week. Hackers are currently exploiting critical flaws in the daily software we all rely on—and in […]

A Browser Extension Risk Guide After the ShadyPanda Campaign 2025-12-15 at 14:37 By In early December 2025, security researchers exposed a cybercrime campaign that had quietly hijacked popular Chrome and Edge browser extensions on a massive scale. A threat group dubbed ShadyPanda spent seven years playing the long game, publishing or acquiring harmless extensions, letting […]

JLR: Payroll data stolen in cybercrime that shook UK economy 2025-12-15 at 14:17 By Carly Page Automaker admits raid that crippled its factories in August led to the theft of sensitive info Jaguar Land Rover (JLR) has reportedly told staff the cyber raid that crippled its operations in August didn’t just bring production to a […]

Legal protection for ethical hacking under Computer Misuse Act is only the first step 2025-12-15 at 13:48 By Rupert Goodwins I’m dreaming of a white hat mass Opinion  It was 40 years ago that four young British hackers set about changing the law, although they didn’t know it at the time. It was a cross-platform […]

Trump Administration Issues New AI Executive Order 2025-12-15 at 13:48 By How should organizations respond to the new AI executive order? This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector 2025-12-15 at 13:22 By Cybersecurity researchers have disclosed details of an active phishing campaign that’s targeting a wide range of sectors in Russia with phishing emails that deliver Phantom Stealer via malicious ISO optical disc images. The activity, codenamed Operation MoneyMount-ISO by Seqrite Labs, […]

Apple, Google forced to issue emergency 0-day patches 2025-12-15 at 13:01 By Carly Page Both admit attackers were already exploiting the bugs, with scant detail and hints of spyware-grade abuse Apple and Google have both issued emergency patches after zero-day bugs were caught being actively exploited in what the companies describe as “sophisticated” real-world attacks.… […]