Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Critical Apache Tika Vulnerability CVE-2025-66516 Allows XXE Attacks via PDF XFA Forms
A new critical vulnerability in Apache Tika, tracked as CVE-2025-66516, has been disclosed with the maximum CVSS score of 10.0. ...
Europol’s Operation Olympia Dismantles Long-Running Cryptomixer Used for Bitcoin Laundering
International law enforcement agencies have taken down Cryptomixer, one of Europe’s longest-running cryptocurrency mixing services, in a coordinated operation targeting ...
FBI Warns of AI‑Powered Virtual Kidnapping Scams Using Deepfake Evidence
The FBI is warning about a growing wave of AI‑powered virtual kidnapping scams in which criminals use manipulated photos and ...
Google Patches New Chrome Zero-Day in LibANGLE Metal Renderer
Update: The vulnerability has been formally assigned CVE-2025-14174 and added to CISA’s Known Exploited Vulnerabilities (KEV) catalog. The same CVE ...
PCIe IDE Vulnerabilities Expose Weaknesses in Hardware-Level Encryption
Three newly disclosed vulnerabilities in the PCI Express Integrity and Data Encryption (PCIe IDE) mechanism highlight that even modern hardware ...
Trojan.ChimeraWire: New Windows Malware Turns Chrome into a Stealth SEO Click Fraud Engine
Security analysts at Doctor Web have reported the discovery of Trojan.ChimeraWire, an unusual Windows-focused Trojan that weaponizes the Google Chrome ...
DroidLock Android Malware Combines Ransomware and Full Remote Control
Security researchers at Zimperium have identified a new family of Android malware dubbed DroidLock. The threat stands out because it ...
Global Password Leaks 2023–2025: Persistent Weaknesses in Password Security
A large-scale analysis of credential leaks from 2023 to 2025 conducted by Kaspersky Lab highlights a long‑standing problem in password ...
CVE-2025-8110 in Gogs: Critical Remote Code Execution Threat for Self‑Hosted Git Servers
Update (2026-01-23): Gogs v0.13.4 has been released and includes a fix for CVE-2025-8110. Administrators should upgrade immediately. A critical zero‑day ...
React2Shell (CVE-2025-55182): Critical React and Next.js RCE Now Weaponized by EtherRAT Malware
Within days of the disclosure of the critical React2Shell (CVE-2025-55182) vulnerability, threat hunters from Sysdig have observed active exploitation against ...
