Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code
Published: 2025-12-26
Trust Wallet reported a security incident in version 2.68 of its Google Chrome extension, resulting in approximately $7 million in cryptocurrency losses, and is urging users to update to version 2.69 while refunding affected users.
2. China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
Published: 2025-12-26
The China-linked Evasive Panda APT group conducted DNS poisoning attacks from November 2022 to November 2024 to deliver the MgBot backdoor, targeting victims in Türkiye, China, and India using adversary-in-the-middle techniques.
3. Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection
Published: 2025-12-26
A critical vulnerability (CVE-2025-68664, CVSS 9.3) in LangChain Core allows attackers to steal secrets and manipulate LLM responses through serialization injection in its dumps() and dumpd() functions.
4. ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
Published: 2025-12-25
This week’s ThreatsDay bulletin highlights evolving threats like stealth loaders, AI chatbot flaws, Docker hacks, and other stories showing attackers blending into trusted tools and interfaces.
5. LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
Published: 2025-12-25
Stolen encrypted vault backups from the 2022 LastPass breach enabled cybercriminals, possibly Russian actors, to crack weak master passwords and steal cryptocurrency assets into late 2025.
6. Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Published: 2025-12-25
Fortinet reported recent abuse of CVE-2020-12812, a five-year-old FortiOS SSL VPN flaw (CVSS 5.2) that bypasses two-factor authentication under specific configurations involving local and remote authentication.
7. CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
Published: 2025-12-25
CISA added CVE-2023-52163 (CVSS 8.8) to its KEV catalog, a command injection flaw in Digiever DS-2105 Pro NVRs enabling remote code execution, with active exploitation by botnets like Mirai and ShadowV2.
8. New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
Published: 2025-12-24
A new MacSync stealer variant uses a digitally signed and notarized Swift app disguised as a messaging installer to evade Apple’s Gatekeeper, distributed via a DMG file from zkcall[.]net.
Stay Vigilant
Cyber threats are evolving rapidly. Follow reputable sources for ongoing insights, implement multi-factor authentication where possible, and regularly review your security posture to mitigate risks. Stay safe online!