News

Wed 17 Dec 2025· 55 articles

1. 01:47

   Google Chrome Emergency Update: High-Severity Memory Corruption Flaws Fixed in WebGPU and V8

   On 17 December 2025 Google rolled out an important security update for the Stable desktop channel, patching two high-severity memory corruption flaws in WebGPU and the V8 engine. The update brings Chrome to version 143.0.7499.146/147 for Windows and Mac, and…

   SecurityOnline
   
2. 00:46

   Fintech Endgame: PayPal Applies for Industrial Bank Charter to Fund SMEs and Support Crypto

   PayPal has submitted applications to regulators in Utah and to the Federal Deposit Insurance Corporation to establish an industrial bank, signalling a shift from a pure money-transfer intermediary to a licensed bank with direct deposit-taking and lending…

   SecurityOnline
   
3. 00:42

   Security Shift: Google Retires Dark Web Report Service, Citing Inability to Offer Concrete Remedies

   Google has announced that its Dark Web Report will be retired in February 2026, after previously expanding the service to all Google account holders, including users in Taiwan. The phase-out will occur in two stages: from 15 January 2026 the system will stop…

   SecurityOnline
   
4. 00:40

   Critical FreePBX Flaw (CVE-2025-66039) Risks PBX Takeover via Authentication Bypass in ‘webserver’ Auth Mode

   A critical vulnerability in FreePBX, CVE-2025-66039, could allow unauthorised access to the full administrative interface, potentially enabling a complete PBX takeover when the system is configured to use “webserver” as its authentication type. The flaw,…

   SecurityOnline
   
5. 00:37

   SantaStealer Unwrapped: New MaaS Info-Stealer Rebrands Blueline to Steal Crypto and Credentials

   According to Rapid7 Labs, SantaStealer is a new information stealer marketed as a Malware-as-a-Service and promoted on Telegram channels and underground forums, with a full release planned before the year ends. Discovered in early December 2025, the threat…

   SecurityOnline
   
6. 00:31

   Windows Admin Center Flaw (CVE-2025-64669): How a Simple Folder Permission Opened the Door to SYSTEM Access

   A high-severity flaw in Microsoft’s Windows Admin Center, CVE-2025-64669, has been disclosed by Cymulate Research Labs as a local privilege escalation that lets a standard user gain SYSTEM access on many installations. The root cause is insecure directory…

   SecurityOnline
   
7. 00:22

   GhostPairing: New Attack Hijacks WhatsApp via Linked Devices, Tricking Users with Fake Facebook QR Code

   A deceptive new cyberattack, dubbed GhostPairing, exploits WhatsApp’s linked devices feature to take control of user accounts without stealing passwords or SIM cards. According to Gen Digital, the campaign relies on social engineering rather than code…

   SecurityOnline
   
8. 00:19

   Emerging Gentlemen Ransomware Hits 17 Countries with Double Extortion & BYOVD Evasion Tactics

   A new ransomware operator, dubbed Gentlemen, has rapidly risen in prominence, targeting industries across 17 countries with double extortion and BYOVD evasion tactics, according to AhnLab. The group was first identified in August 2025 and has since become…

   SecurityOnlineThe Gentlemen
   
9. 00:13

   NexusRoute Uncovered: Android RAT Impersonates Indian E-Challan via GitHub for UPI Fraud & Surveillance

   NexusRoute is described as a highly coordinated Android malware operation that impersonates Indian Government Ministry services, specifically the mParivahan and e-Challan platforms, to enable UPI fraud and surveillance. according to CYFIRMA, the campaign…

   SecurityOnline
   
10. 00:10

    Hacker Honeypot? BreachForums Reopens via Emails Sent from French Ministry of the Interior Domain

    Emails claiming BreachForums had reopened were sent from pppj-sdpj92-ger2@interieur.gouv[.]fr, a domain that belongs to the French Ministry of the Interior, in what appears to be a phishing honeypot designed to lure cybercriminals. The incident coincided…

    SecurityOnline
    
11. 00:08

    Switching Teams: iOS 26.3 Beta Adds Official “Transfer to Android” Data Migration Option

    According to Apple’s description, the newly released iOS 26.3 beta adds a “Transfer to Android” option in Settings, allowing users to migrate their entire dataset to an Android system. Under Settings > General > Transfer or Reset iPhone, the feature can move…

    SecurityOnline
    
12. 00:06

    Tech Force: US Government Recruits 1,000 Elite AI Engineers with Apple, Microsoft, and NVIDIA Partnership

    Tech Force is described as a Trump administration initiative to prevent the U.S. federal government from falling behind in the AI era, with plans to recruit about 1,000 elite engineers and technical experts into government service to upgrade national AI…

    SecurityOnline
    
13. 00:03

    Ecosystem Moat: NVIDIA Acquires SchedMD (Slurm) and Unveils Nemotron 3 Hybrid AI Model

    Ecosystem Moat: NVIDIA announced the acquisition of California-based SchedMD, the primary maintainer of Slurm, along with the unveiling of Nemotron 3, a hybrid AI model built on a Mixture-of-Experts design that fuses the Mamba architecture with the…

    SecurityOnline
    
14. 00:00

    Stay Secure: Why Cyber Hygiene Should Be Part of Your Personal Hygiene

    Cyber hygiene is presented as a crucial element of personal hygiene in today’s tech-driven world, with the article arguing that clean, secure digital habits are more important than ever as more of daily life moves online. According to Unit 42, three…

    unit42.paloaltonetworks.com
    
15. 00:00

    Profit Over Safety: Meta Earns $3B from Chinese Scam Ads, Executives Tolerated Fraud for Revenue Growth

    According to Reuters, Meta has long tolerated a vast volume of scam, illegal gambling, and prohibited‑content advertisements from China to protect its advertising revenue, with internal documents showing senior executives under pressure to grow revenue…

    SecurityOnline