December 2025 – Page 3 – TheCyberThrone

Year 2025

From Disclosure to Detonation: CISA KEV Catalog Trends 2025

As 2025 draws to a close, CISA's Known Exploited Vulnerabilities (KEV) catalog stands as the most critical signal in modern vulnerability management—244 new entries added this year alone, up 28%…

PravinKarthik December 24, 2025

ServiceNow Seals $7.75 Billion Armis Acquisition

ServiceNow announced on December 23, 2025, its agreement to acquire Armis for $7.75 billion in cash, the largest deal in its history. This move catapults ServiceNow deeper into cybersecurity, targeting…

PravinKarthik December 23, 2025

Year 2025

Top 25 Most Exploited Vulnerabilities 2025

2025 was the year vulnerabilities stopped being warnings and became entry points. Attackers no longer waited for missteps. They scanned continuously, weaponized within hours, and exploited with industrial precision. Firewalls…

PravinKarthik December 23, 2025

University of Sydney Data Breach: Over 27,000 Exposed in Code Repository Hack

The University of Sydney confirmed a significant cyber incident on December 18, 2025, revealing unauthorized access to a third-party online IT code library that compromised historical personal data of more…

PravinKarthik December 22, 2025

CVE-2025-11953: Critical RCE in React Native CLI’s Metro Dev Server

CVE-2025-11953 represents a critical remote code execution vulnerability with a CVSS score of 9.8, affecting the React Native Community CLI's Metro development server through an OS command injection flaw. Vulnerability…

PravinKarthik December 22, 2025

Inside MITRE’s Top 25 : Software Risk Reality

A Deep Look at the Software Weaknesses That Still Break the Internet Every year, MITRE’s CWE Top 25 Most Dangerous Software Weaknesses acts like a mirror for the software industry.…

PravinKarthik December 21, 2025

CISSP

CISSP Executive Briefing: Technical Debt as an Enterprise Security Risk

Executive Summary Technical debt is no longer an engineering inconvenience—it is a material security risk and a business continuity threat. What was once accepted as “we’ll fix it later” has…

PravinKarthik December 20, 2025