A critical remote code execution vulnerability in React Server Components and the Next.js framework has sent a shockwave through the modern web ecosystem. At the heart of the issue is a flaw in...
4 December 2025 • In-depth Report NCFE, the 175-year-old awarding body responsible for millions of vocational and technical qualifications across the UK, has taken the drastic and unprecedented step...
Security analysts have uncovered a sophisticated new Android malware campaign dubbed “SeedSnatcher.” The malware is designed to steal cryptocurrency wallet seed phrases by abusing WebView overlays,...
Date: December 3, 2025 Overview: The University of Phoenix has disclosed a significant cybersecurity incident after discovering unauthorized access to its enterprise systems. The breach—linked to...
Fintech services provider Marquis has confirmed a ransomware driven data breach that exposed sensitive customer and partner information. The incident has sent ripples across the financial services...
Phishing campaigns continue to escalate in volume and complexity, with attackers deploying increasingly advanced social engineering tactics designed to bypass traditional security controls. The...
In a stark reminder of the persistent vulnerabilities in digital payment systems, a significant data leak has surfaced on the dark web, compromising the security of 413,000 CVV records. This...
A newly analysed cyber espionage campaign linked to the group known as MuddyWater has revealed how attackers combined convincing fraudulent emails with exploits targeting unpatched VPN appliances to...
Security researchers have disclosed a series of high impact vulnerabilities affecting OpenPLC and ScadaBR, two widely used open source platforms that help industrial operators manage programmable...
The Akira leak site presents stolen corporate data through a retro style command line interface on the dark web. The Akira ransomware group has listed 11 new organisations on its data leak...
In the heart of Europe's bustling logistics network, a digital storm has struck without warning. On December 2, 2025, bpost, Belgium's national postal service and one of the continent's largest...
Incident Overview Today, December 2, 2025, multiple users worldwide reported that Microsoft Defender XDR became inaccessible or exhibited serious performance issues. Aggregated data from...
The popular open-source Android TV client SmartTube experienced a significant security compromise that has raised concerns throughout the streaming and open-source software communities. Known for...
Google has released a major security update addressing 107 distinct vulnerabilities affecting the Android ecosystem. This latest security bulletin - part of the regular monthly patch cycle —...
Mercedes-Benz USA (MBUSA) is facing serious questions after a threat actor using the alias “zestix” claimed to have stolen a large cache of confidential legal documents and customer information...
December 1, 2025 – 18:40 UTC In what is shaping up to be one of the most damaging ransomware incidents ever to strike the adult entertainment sector, the Devman ransomware operation has claimed...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of critical risk to Industrial Control Systems (ICS) by adding an old vulnerability to its list of Known Exploited...
On November 29, 2025 the ransomware-as-a-service group Qilin claimed responsibility for an attack on Chenango Valley Technologies, a U.S. manufacturing and technology-services firm. In a public leak...
The Microsoft Teams cross-tenant bypass vulnerability represents a fundamental architectural limitation within the platform's guest access functionality. When an external user is granted guest access...
On November 29, 2025, the ransomware group Qilin publicly claimed responsibility for a cyberattack against CJW, a U.S.-based grocery retail chain. The group posted an extortion notice threatening to...