A big finish to 2025 in December’s Patch Tuesday
A month with no Critical-severity Windows bugs is overshadowed by a mass of Mariner mop-up
Categories: X-ops
Tags: threat research, featured, Microsoft, Patch Tuesday, zero days
Similar Posts
Foster City goes offline after cybersecurity breach
Bys sThe Daily Journal reports: Days after a cybersecurity breach that was “widely impacting city services,” the city of Foster City has moved its network offline, an action that disrupted its phone and email systems outside of emergency response, according to the city. City staff cannot make or receive calls or respond to emails but will……
Clalit probes suspected cyberattack after Iranian-linked hackers leak patient files
Bys sOr Hadar reports: Clalit Health Services, the largest health maintenance organization in Israel, said it is investigating a suspected cyberattack after an Iranian-linked hacking group claimed it breached the insurer’s systems and published thousands of documents containing personal information of patients. The hacking group, calling itself “Handala,” has published thousands of documents online, including medical……
Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation Confirmed
Bys sThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a maximum-severity security flaw impacting Commvault Command Center to its Known Exploited Vulnerabilities (KEV) catalog, a little over a week after it was publicly disclosed. The vulnerability in question is CVE-2025-34028 (CVSS score: 10.0), a path traversal bug that affects 11.38 Innovation Release, from versions
Breaking Up With Edtech Is Hard to Do
Bys sEllen Ullman reports: When Kerri Wall’s school district decided not to renew its five-year contract with an edtech company last spring, she didn’t expect the hardest part to come after the breakup. As the senior digital innovation administrator for the School District of Indian River County in Florida — and designated student data privacy officer……
Microsoft Warns Python Infostealers Target macOS via Fake Ads and Installers
Bys sMicrosoft has warned that information-stealing attacks are “rapidly expanding” beyond Windows to target Apple macOS environments by leveraging cross-platform languages like Python and abusing trusted platforms for distribution at scale. The tech giant’s Defender Security Research Team said it observed macOS-targeted infostealer campaigns using social engineering techniques such as ClickFix since
Cyber-Attack On Bectu’s Parent Union Sparks UK National Security Concerns
Bys sJake Kanter reports: The cyber-attack on Prospect, the parent union of film and TV group Bectu, has sparked fears that it could have compromised information pertaining to the UK’s national security. Deadline revealed earlier this month that the majority of Prospect’s 150,000 members had their data breached during an “IT security incident” in June. Our original……