A big finish to 2025 in December’s Patch Tuesday
A month with no Critical-severity Windows bugs is overshadowed by a mass of Mariner mop-up
Similar Posts
Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups
Bys sMicrosoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elevated privileges under certain conditions. The vulnerability, tracked as CVE-2025-53786, carries a CVSS score of 8.0. Dirk-jan Mollema with Outsider Security has been acknowledged for reporting the bug. “In an Exchange hybrid…
Korea raises data breach fines to 10% of revenue
Bys sKorea JoongAng Daily reports: Korea’s privacy regulator is sharply raising the cost of data breaches, aiming to push companies to treat data protection as a preventive investment rather than a routine cost of doing business. Starting Friday, companies found to have leaked the personal data of 10 million or more people through intent or gross negligence……
The State of Ransomware in Healthcare 2025
Bys s292 IT and cybersecurity leaders reveal the ransomware realities for healthcare establishments today.
Hong Kong privacy watchdog warns URA over leaked details of 199 tenants, owners
Bys sJess Ma reports: Hong Kong’s privacy watchdog has served a warning letter to the Urban Renewal Authority (URA) over its failure to prevent a leak of the personal details of 199 tenants and owners stored on a cloud platform. The Office of the Privacy Commissioner for Personal Data issued an investigation report on Thursday and…
Patient death at London hospital linked to cyber attack on NHS
Bys sRebecca Whittaker reports: The death of a patient has been linked to a cyber-attack on the NHS last year. Cyber criminals attacked two major NHS trusts causing more than 1,000 cancer treatment delays, 2,000 outpatient appointments to be cancelled and more than 1,000 operations postponed. King’s College Hospital NHS Foundation Trust said on Wednesday; a patient died during the cyber…
Snyk Says ‘Malicious’ NPM Packages Part of Research Project
Bys sApparently malicious NPM packages linked to Snyk raised some concerns, but the security firm clarified that it’s part of a research project. The post Snyk Says ‘Malicious’ NPM Packages Part of Research Project appeared first on SecurityWeek.