A holistic approach to securing Exchange servers beyond Exchange 2016 and 2019 end-of-life.

OnSolve CodeRED was damaged by the attack and has been nonoperational since earlier this month. Dozens of agencies and their respective users have been impacted by the outage and data theft.

Critical GitLab updates (18.6.1/18.5.3) fix severe CI/CD credential theft (CVE-2024-9183) & unauthenticated DoS flaws. Upgrade immediately.

CloudSEK exposes a massive network of Amazon clones and 200k fake .shop domains targeting Black Friday shoppers. Learn how to spot these holiday scams.

CVE-2025-66035: Angular protocol-relative URLs leak XSRF tokens, bypassing CSRF protection. Update to v19.2.16, v20.3.14, or v21.0.1 now.

A massive leak exposes Iran's Department 40 (APT35). Discover how IRGC hackers build target packages for assassination squads and drone strikes.

Critical alert: Twonky Server suffers unpatched flaws (CVE-2025-13315/16) allowing full takeover. Vendor has no fix; isolate your server immediately.

Alert: Malicious Blender files are delivering StealC V2 infostealer. 3D artists downloading from free sites are at risk. Disable auto-run scripts now.

Cybercriminals are using fake Battlefield 6 cracks and trainers to deploy infostealers. Avoid "InsaneRamZes" & "RUNE" torrents to protect your data.

Zscaler reveals Water Gamayun exploiting the MSC EvilTwin zero-day (CVE-2025-26633) via fake hiring lures to deploy stealthy backdoors.

Critical Ray AI flaw (CVE-2025-62593) allows RCE via DNS rebinding on Safari & Firefox. Chrome is immune. Update to Ray v2.52.0 immediately.

The malicious 'Crypto Copilot' Chrome extension drains Solana funds from traders on X by injecting hidden transfers. Remove this malware immediately.

Apache SkyWalking patches a Stored XSS flaw (CVE-2025-54057) affecting versions 10.2.0 and older. Upgrade to v10.3.0 to secure your APM dashboards.

Following the Asahi Group cyberattack, the company spent two months containing and restoring essential systems.

The OpenAI Mixpanel security incident originated on November 9, 2025, when Mixpanel detected an intrusion into a section of its systems.

ASUS released new firmware to address multiple vulnerabilities, including a critical auth bypass flaw in routers with AiCloud enabled.

Windows 10 support ends, yet Dell reports Windows 11 adoption is significantly slower than expected. Over 500M PCs fail hardware checks, slowing transition.

South Korea’s largest exchange, UPBIT, was hacked for $369M in Solana tokens from its hot wallet, forcing a withdrawal suspension. The exchange vows full user compensation.

OpenAI warns some users that a cyberattack on analytics firm Mixpanel may have exposed their data.

Tel Aviv, Israel, 27th November 2025, CyberNewsWire

Alisa Viejo, CA, USA, 27th November 2025, CyberNewsWire