Assura Named to MSSP Alert and Cyber Alliance’s 2025 “Top 250 MSSPs,” Ranking at Number 94
FOR IMMEDIATE RELEASE Richmond, VA — December 11, 2025 — Assura is proud to announce that it has been named...
December
Weekly Update 482
17 December 2025 Perhaps it's just the time of year where we all start to wind down a bit, or...
Denial-of-Service and Source Code Exposure in React Server Components
In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues –...
Processing 630 Million More Pwned Passwords, Courtesy of the FBI
13 December 2025 The sheer scope of cybercrime can be hard to fathom, even when you live and breathe it...
A Browser Extension Risk Guide After the ShadyPanda Campaign
In early December 2025, security researchers exposed a cybercrime campaign that had quietly hijacked popular Chrome and Edge browser extensions...
Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day
Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day Pierluigi Paganini December 10, 2025 Microsoft Patch...
Cloudflare Forces Widespread Outage to Mitigate Exploitation of Maximum Severity Vulnerability in React2Shell
Just hours after a maximum severity vulnerability in React2Shell was disclosed on December 3, Amazon threat intelligence teams observed active exploitation...
Maximum-severity XXE vulnerability discovered in Apache Tika
Maximum-severity XXE vulnerability discovered in Apache Tika Pierluigi Paganini December 06, 2025 A maximum severity vulnerability in Apache Tika, tracked...
Weekly Update 481
05 December 2025 Twelve years (and one day) since launching Have I Been Pwned, it's now a service that Charlotte...
University of Pennsylvania and University of Phoenix disclose data breaches
University of Pennsylvania and University of Phoenix disclose data breaches Pierluigi Paganini December 03, 2025 The University of Pennsylvania and...
Why Does Have I Been Pwned Contain “Fake” Email Addresses?
04 December 2025 Normally, when someone sends feedback like this, I ignore it, but it happens often enough that it...
Researchers spotted Lazarus’s remote IT workers in action
Researchers spotted Lazarus’s remote IT workers in action Pierluigi Paganini December 03, 2025 Researchers exposed a Lazarus scheme using remote...
MuddyWater strikes Israel with advanced MuddyViper malware
MuddyWater strikes Israel with advanced MuddyViper malware Pierluigi Paganini December 02, 2025 Iran-linked threat actor MuddyWater targeted multiple Israeli sectors with...
Cyber Startup Frenetik Launches with Patented Deception Technology That Bets Against the AI Arms Race
Bethesda, USA / Maryland, December 2nd, 2025, CyberNewsWire While most cybersecurity companies pour resources into AI models, massive compute, hoovering...
Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth
Claymont, Delaware, December 1st, 2025, CyberNewsWire Lancaster’s arrival brings significant North American channel experience and expertise, supporting usecure’s ambition...
