GoKawiil - Tech News

511.

CISA orders feds to patch actively exploited Geoserver flaw (bleepingcomputer.com)

2025-12-12 | get Geoserver → | tags: agencies, attacks, cisa

512.

Attackers Exploited Gogs Zero-Day Flaw for Months (darkreading.com)

2025-12-11 | by Alexander Culafi | get Gogs → | tags: exploitation, gogs, path

513.

Hackers exploit Gladinet CentreStack cryptographic flaw in RCE attacks (bleepingcomputer.com)

2025-12-11 | get Gladinet CentreStack → | tags: access, cryptographic, file

514.

Notepad++ fixes flaw that let attackers push malicious update files (bleepingcomputer.com)

2025-12-11 | get Notepad → | tags: incidents, notepad, plus

515.

Security flaws in Freedom Chat app exposed users’ phone numbers and PINs (techcrunch.com)

2025-12-11 | by Zack Whittaker | get Phone Number Manager → | tags: chat, daigle, freedom

516.

Microsoft bounty program now includes any flaw impacting its services (bleepingcomputer.com)

2025-12-11 | get Windows → | tags: bounty, microsoft, online

517.

SAP fixes three critical vulnerabilities across multiple products (bleepingcomputer.com)

2025-12-09 | get SAP ERP → | tags: code, flaw, flaws

518.

Microsoft December 2025 Patch Tuesday fixes 3 zero-days, 57 flaws (bleepingcomputer.com)

2025-12-09 | get Windows → | tags: important windows, microsoft, remote

519.

Fortinet warns of critical FortiCloud SSO login auth bypass flaws (bleepingcomputer.com)

2025-12-09 | get FortiCloud → | tags: forticloud, forticloud sso, fortinet

520.

Ivanti warns of critical Endpoint Manager code execution flaw (bleepingcomputer.com)

2025-12-09 | get Endpoint Manager → | tags: exploited, ivanti, ivanti epm

521.

Gemini Enterprise No-Click Flaw Exposes Sensitive Data (darkreading.com)

2025-12-09 | get Cloud → | tags: add malicious, attackers, attackers add

522.

North Korean hackers exploit React2Shell flaw in EtherRAT malware attacks (bleepingcomputer.com)

2025-12-09 | get EtherRAT → | tags: ethereum, etherrat, malware

523.

Exploitation Activity Ramps Up Against React2Shell (darkreading.com)

2025-12-08 | get React2Shell → | tags: actors, actors advantage, advantage

524.

Researcher finds Chinese KVM has undocumented microphone, communicates with China-based servers — Sipeed's nanoKVM switch has other severe security flaws and allows audio recording, claims researcher (tomshardware.com)

2025-12-08 | by Luke James | get Sipeed → | tags: device, hardware, microphone

525.

Researcher finds Chinese KVM switch has serious security flaws — Sipeed's switch allows for audio recording and has other serious security flaws (tomshardware.com)

2025-12-08 | by Luke James | get KVM switch → | tags: device, hardware, microphone

526.

Critical flaws found in AI development tools are dubbed an 'IDEsaster' — data theft and remote code execution possible (tomshardware.com)

2025-12-07 | by Luke James | get IntelliJ → | tags: agents, ai agents, code

527.

React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable (bleepingcomputer.com)

2025-12-06 | get Cloudflare Shell → | tags: addresses, attackers, exploitation

528.

‘Jujutsu Kaisen: Execution’ Is All the Worst Impulses of the Anime Compilation Film Format (gizmodo.com)

2025-12-05 | get Smartphone → | tags: compilation, compilation film, film

529.

Critical React2Shell flaw actively exploited in China-linked attacks (bleepingcomputer.com)

2025-12-05 | get React2Shell → | tags: attacks, attempts, china

530.

React2Shell critical flaw actively exploited in China-linked attacks (bleepingcomputer.com)

2025-12-05 | get OpenSSH → | tags: attacks, attempts, china

531.

Microsoft 'Mitigates' Windows LNK Flaw Exploited As Zero-Day (slashdot.org)

2025-12-04 | get Windows LNK → | tags: attacks, files, flaw

532.

Hackers are exploiting ArrayOS AG VPN flaw to plant webshells (bleepingcomputer.com)

2025-12-04 | get ArrayOS → | tags: access, array, array networks

533.

NCSC's ‘Proactive Notifications’ warns orgs of flaws in exposed devices (bleepingcomputer.com)

2025-12-04 | get Device management software → | tags: early, ncsc, notifications

534.

Your Android phone may be in critical danger - update it ASAP (zdnet.com)

2025-12-04 | by Lance Whitney | get Google Pixel → | tags: android, android framework, device

535.

Critical React, Next.js flaw lets hackers execute code on servers (bleepingcomputer.com)

2025-12-04 | get Serverless → | tags: react, react server, security

536.

Critical React Flaw Triggers Calls for Immediate Action (darkreading.com)

2025-12-03 | get Microcode → | tags: affect, affect cloud, assigned

537.

OpenAI is secretly fast-tracking 'Garlic' to fix ChatGPT's biggest flaws: What we know (zdnet.com)

2025-12-03 | by Sabrina Ortiz | get Artificial Intelligence → | tags: anthropic, chen, garlic

538.

Critical flaw in WordPress add-on for Elementor exploited in attacks (bleepingcomputer.com)

2025-12-03 | get WordPress plugin → | tags: addons, plugin, security

539.

Microsoft "mitigates" Windows LNK flaw exploited as zero-day (bleepingcomputer.com)

2025-12-03 | get Windows LNK → | tags: files, lnk files, malicious

540.

Google fixes two Android zero days exploited in attacks, 107 flaws (bleepingcomputer.com)

2025-12-02 | get Android → | tags: android, bulletin, fixes