Cisco email security appliances rooted and backdoored via still unpatched zero-day

Kali Linux 2025.4: New tools and "quality-of-life" improvements - View in browser  Weekly cybersecurity news December 22, 2025 Latest articles: What types of compliance should your password manager support? Product showcase: NAKIVO v11.1 advances MSP service delivery with secure multi-tenant management AI isn't one system, and your threat model shouldn't be either LLMs work better together in smart contract audits Identity risk is changing faster than most security teams expect New infosec products of the week: December 19, 2025 Crypto theft in 2025: North Korean hackers continue to dominate Clipping Scripted Sparrow's wings: Tracking a global phishing ring Microsoft 365 users targeted in device code phishing attacks More than half of public vulnerabilities bypass leading WAFs Group Policy abuse reveals China-aligned espionage group targeting governments The soft underbelly of space isn't in orbit, it's on the ground Privacy risks sit inside the ads that fill your social media feed Should AI access be treated as a civil right across generations? What cybersecurity leaders are reading to stay ahead Cisco email security appliances rooted and backdoored via still unpatched zero-day Exploited SonicWall zero-day patched (CVE-2025-40602) Attackers are exploiting auth bypass vulnerability on FortiGate firewalls (CVE-2025-59718) Why vulnerability reports stall inside shared hosting companies Banks built rules for yesterday's crime and RegTech is trying to fix that Zabbix: Open-source IT and OT observability solution AI breaks the old security playbook European police busts Ukraine scam call centers SoundCloud breached, hit by DoS attacks Ro's CISO on managing data flows in telehealth AI might be the answer for better phishing resilience Product showcase: GlassWire mobile firewall for Android Passwordless is finally happening, and users barely notice Cybersecurity jobs available right now: December 16, 2025 What Cloudflare's 2025 internet review says about attacks, outages, and traffic shifts Update your Apple devices to fix actively exploited vulnerabilities! (CVE-2025-14174, CVE-2025-43529) Kali Linux 2025.4: New tools and "quality-of-life" improvements How researchers are teaching AI agents to ask for permission the right way Prometheus: Open-source metrics and monitoring systems and services Europe's DMA raises new security worries for mobile ecosystems Manufacturing is becoming a test bed for ransomware shifts Video: How exposure management changes cyber defense Industry news: Apiiro unveils AI SAST built on deep code analysis to eliminate false positives AppGate extends zero trust to secure AI workloads with Agentic AI Core Protection Concentric AI expands Private Scan Manager with Azure support for regulated industries Push Security detects and blocks malicious copy-and-paste activity Trellix advances NDR to close the OT-IT threat detection-to-response gap XM Cyber bridges external attack surface management with validated internal attack paths Hadrian launches offensive agentic AI to expose vulnerabilities before attackers Vectra AI redefines hybrid resilience across the attack lifecycle StackHawk adds Business Logic Testing (BLT) to its AppSec platform menu Astra introduces offensive-grade cloud vulnerability scanner to cut noise and prove risk Copyright © 2025 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive