Gogs 0-Day Vulnerability Exploited in the Wild to Hack 700+ Instances

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-day vulnerability in Gogs, a widely used self-hosted Git service, is currently being exploited in the wild. Designated as CVE-2025-8110, this flaw allows authenticated users to execute a symlink bypass, leading to Remote Code Execution (RCE). As of …

1inch Named Exclusive Swap Provider at Launch for Ledger Multisig

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Road Town, British Virgin Islands, December 11th, 2025, CyberNewsWire 1inch, the leading DeFi ecosystem, has been selected as the exclusive swap provider at launch for Ledger Multisig, deepening the collaboration between the two projects. By integrating the 1inch Swap API …

Microsoft Teams to Introduce External Domains Anomalies Report for Enhanced Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft plans to enhance the administrative features of its Teams collaboration platform with a significant new security function to monitor external communications. Scheduled for rollout in February 2026, the “External Domains Anomalies Report” is designed to help IT administrators proactively …

New ClickFix Attacks as macOS Infostealer Leverages Official ChatGPT Website by Piggybacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malicious campaign is targeting macOS users via a novel attack that exploits ChatGPT’s official website. The attackers are using a technique called ClickFix to spread the AMOS infostealer by posting fake installation guides on the legitimate chatgpt.com domain. …

Hackers Leveraging LLM Shared Chats to Steal Your Passwords and Crypto

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware campaign has emerged that exploits legitimate AI platforms to deliver malicious code directly to unsuspecting users. Threat actors are using sponsored Google search results to redirect users searching for common macOS troubleshooting tips, such as “how to …

New “SOAPwn” .NET Vulnerabilities Expose Barracuda, Ivanti and Microsoft Appliances to RCE Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New research into legacy .NET Framework SOAP client code has uncovered “SOAPwn,” a class of vulnerabilities. That can be weaponized for remote code execution (RCE) across multiple enterprise products. Including Barracuda Service Center RMM, Ivanti Endpoint Manager, Umbraco CMS 8, …

Critical Vulnerability in Multiple India-Based CCTV Cameras Let Attackers Video and Account Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe security vulnerability affecting multiple India-based CCTV camera manufacturers has been disclosed. Potentially allowing attackers to access video feeds and steal account credentials without authentication. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on December 9, …

GitLab Patches Multiple Vulnerabilities that Allows Attackers to Trigger XSS and DoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical security patches on December 10, 2025, addressing ten significant vulnerabilities across its Community Edition and Enterprise Edition platforms. GitLab has released updated versions 18.6.2, 18.5.4, and 18.4.6 to address multiple high-severity security issues. High-Severity Threats Identified Four vulnerabilities received …

High-Severity Jenkins Vulnerability Allows Unauthenticated DoS via HTTP CLI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Patches released by Jenkins address a significant denial-of-service (DoS) vulnerability affecting millions of organizations. That rely on the popular automation server for continuous integration and deployment pipelines. A high-severity vulnerability in Jenkins versions 2.540 and earlier (LTS 2.528.2 and earlier). …

Threat Actors Leverage ChatGPT to Attack Mac Devices With AMOS InfoStealer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new AMOS InfoStealer campaign is abusing trust in ChatGPT to infect Mac devices under the guise of simple troubleshooting help. Victims search for a fix to a sound problem, click a sponsored ChatGPT result, and are shown what looks …