Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
Published: 2025-12-25
Encrypted vault backups stolen in the 2022 LastPass breach have allowed attackers to crack weak master passwords and drain cryptocurrency assets into late 2025, with evidence pointing to Russian cybercriminal actors using high-risk exchanges as off-ramps.
2. Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Published: 2025-12-25
Fortinet observed recent abuse of a five-year-old flaw, CVE-2020-12812, in FortiOS SSL VPN that allows login without 2FA under specific configurations involving case-sensitive username mismatches with remote authentication methods like LDAP.
3. CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
Published: 2025-12-25
CISA added CVE-2023-52163, a command injection flaw in Digiever DS-2105 Pro NVRs with a CVSS score of 8.8, to its KEV catalog due to active exploitation for remote code execution, often to deploy botnets like Mirai and ShadowV2.
4. Interpol-led Action Decrypts 6 Ransomware Strains, Arrests Hundreds
Published: 2025-12-25
An Interpol-led operation has successfully decrypted six ransomware strains and resulted in the arrest of hundreds of individuals involved in cybercrime activities.
5. CISA Flags ASUS Live Update CVE, but the Attack is Years Old
Published: 2025-12-25
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a vulnerability in ASUS Live Update, though the associated attacks occurred years ago.
6. 100+ Cybersecurity Predictions 2026 for Industry Experts as the AI Adapted in the Wild
Published: 2025-12-25
As artificial intelligence becomes deeply embedded in enterprise operations and cybercriminal arsenals alike, the Cybersecurity Predictions 2026 landscape reveals an unprecedented convergence of autonomous threats, identity-centric defenses, and AI-driven attack vectors.
7. Net-SNMP Vulnerability Enables Buffer Overflow and the Daemon to Crash
Published: 2025-12-25
A new critical vulnerability affecting the Net-SNMP software suite has been disclosed, posing a significant risk to network infrastructure worldwide. Tracked as CVE-2025-68615, this security flaw enables buffer overflow and can cause the daemon to crash.
8. Hackers Exploiting Three-Year-Old FortiGate Vulnerability to Bypass 2FA on Firewalls
Published: 2025-12-25
Cybercriminals are actively abusing a long-patched Fortinet FortiGate flaw from July 2020, slipping past two-factor authentication (2FA) on firewalls and potentially granting unauthorized access.
Stay Vigilant
Cyber threats are evolving rapidly. Follow reliable sources for ongoing insights, implement zero-trust architecture where feasible, and conduct regular penetration testing to identify weaknesses before attackers do. Stay safe online!