A big finish to 2025 in December’s Patch Tuesday
A month with no Critical-severity Windows bugs is overshadowed by a mass of Mariner mop-up
Categories: X-ops
Tags: threat research, featured, Microsoft, Patch Tuesday, zero days
Similar Posts
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally
Bys sCybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware. The malware, introduced via a change to “lib/commonjs/index.js,” allows an attacker to run shell commands, take screenshots, and upload files to infected machines, Aikido Security told The Hacker News, stating these packages collectively account for nearly…
Insider Threat: Tackling the Complex Challenges of the Enemy Within
Bys sThe insider threat problem will worsen, and the solutions will widen, in the age of generative-AI. The post Insider Threat: Tackling the Complex Challenges of the Enemy Within appeared first on SecurityWeek.
Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks
Bys sBad actors are increasingly training their sights on trucking and logistics companies with an aim to infect them with remote monitoring and management (RMM) software for financial gain and ultimately steal cargo freight. The threat cluster, believed to be active since at least June 2025 according to Proofpoint, is said to be collaborating with organized…
Imprisoned IRS Contractor Leaked Information of Over 400,000 Taxpayers
Bys sJames Lynch reports: Imprisoned former IRS contractor Charles Littlejohn improperly leaked information of over 400,000 taxpayers, a far greater number than the agency previously disclosed. Acting IRS Commissioner Douglas O’Donnell wrote a letter to House Judiciary Committee Chairman Jim Jordan (R., Ohio) earlier this month notifying him that Littlejohn’s illegal disclosures impacted 405, 427 taxpayers,…
Keenan & Associates settles 2023 data breach litigation for $14M
Bys sKeenan & Associates is a benefits consulting and insurance brokerage provider in California, providing services to several sectors, including healthcare entities and educational facilities. Between August 21, 2023 and August 27, 2023, an unauthorized user accessed information relating to certain of Keenan’s customers, including names, dates of birth, Social Security numbers, passport numbers, driver’s license……
TikTok Goes Dark in the U.S. as Federal Ban Takes Effect January 19, 2025
Bys sPopular video-sharing social network TikTok has officially gone dark in the United States, 2025, as a federal ban on the app comes into effect on January 19, 2025. “We regret that a U.S. law banning TikTok will take effect on January 19 and force us to make our services temporarily unavailable,” the company said in…