Microsoft Ends 2025 with 56 Security Fixes, Including Actively Exploited Flaw
Microsoft closed out 2025 by releasing patches for 56 security vulnerabilities across its Windows platform, including one flaw already being exploited in the wild. Of the total, three were rated Critical and 53 Important, with two publicly known at the time of disclosure.
Banks Face Urgent Call to Upgrade IT Systems for Customer Vulnerability Standards
Financial services firms are being urged to urgently review their IT systems and processes after new independent guidance on managing customer vulnerability was formally adopted by the Financial Ombudsman Service (FOS).
Researchers Warn of Four Sophisticated Phishing Kits Targeting Global Users
Cybersecurity experts have uncovered four new phishing kits—BlackForce, GhostFrame, InboxPrime AI, and Spiderman—capable of large-scale credential theft and bypassing security defenses.
CommBank launches national AI and cybersecurity programme for SMEs
Commonwealth Bank of Australia (CommBank) today announced a national technology skills initiative to help Australia’s small businesses build AI, cybersecurity and digital capabilities to lift productivity and drive growth.
The WebXR Leak: A Hidden Browser Flaw Exposed Millions to Risk
A serious security vulnerability has recently been uncovered in the underlying technology powering most of the world’s web browsers, placing over four billion devices at risk of a data leak. The flaw was discovered by autonomous security specialist AISLE, which rated the issue as Medium severity (4.3). Despite its rating, the scale of exposure was enormous, as it affected all major browsers built on the Chromium code base—including Google Chrome, Microsoft Edge, Brave, and Opera.
U.S. Warns of Brickstorm Backdoor Malware Targeting U.S. Infrastructure
Federal cybersecurity officials have issued a warning about a stealthy backdoor known as Brickstorm, which Chinese state-sponsored hackers are deploying across critical infrastructure environments in the United States and Canada.
WordPress Sites Under Attack
A severe security flaw in the King Addons for Elementor WordPress plugin has come under active exploitation, putting thousands of websites at risk.
Nationwide Cyberattack Disrupts CodeRED Emergency Alert System
A nationwide cyberattack has compromised the OnSolve CodeRED emergency notification system, prompting cities and counties across the United States to warn residents and advise password changes. CodeRED, widely used by local governments, delivers urgent alerts during severe weather, evacuations, missing persons, and other emergencies.
NEWS & PR
