December 2025 – Page 4 – TheCyberThrone

CVE-2025-14733: Critical WatchGuard Firebox RCE Actively Exploited

Overview CVE-2025-14733 is a critical remote code execution (RCE) vulnerability in WatchGuard Fireware OS that allows unauthenticated attackers to take over Firebox firewall appliances via IKEv2 VPN functionality.The flaw is…

PravinKarthik December 20, 2025

CVE-2025-40602: SonicWall SMA1000 Zero-Day Bug

SonicWall SMA 1000 and SMA 100 series appliances face a critical local privilege escalation vulnerability, CVE-2025-40602, actively exploited in the wild and often chained with other flaws for full root…

PravinKarthik December 19, 2025

Cisco Hits Perfect 10 with Secure Email Gateway Bug

Cisco’s CVE-2025-20393 is a CVSS 10.0 zero-day in Cisco AsyncOS that gives unauthenticated attackers full root control over Cisco Secure Email Gateway and Secure Email and Web Manager when the…

PravinKarthik December 18, 2025

From Burden to Clarity:Rethinking CISO and Board Relationship

Transparency and Accountability as the Foundation of Trust In my earlier writing, I spent time describing the fatigue, pressure, and emotional weight carried by the CISO role. Those observations were…

PravinKarthik December 17, 2025

PDVSA Cyberattack Disrupts Production

Venezuela's state-owned oil giant Petróleos de Venezuela (PDVSA) suffered a major cyberattack over the December 13-14, 2025 weekend, halting oil exports and exposing vulnerabilities in critical energy infrastructure. The incident…

PravinKarthik December 17, 2025

Askul and Fieldtex Discloses a Data Breach

In late 2025, two very different companies on opposite sides of the world – Japan’s Askul and U.S.-based Fieldtex Products – were pulled into the same story: high‑impact ransomware intrusions…

PravinKarthik December 17, 2025

700 Credit Discloses a data breach

700Credit, a U.S. fintech firm providing credit reporting and identity verification for automotive dealerships, suffered a data breach impacting approximately 5.8 million individuals. Breach Timeline Suspicious activity was detected on…

PravinKarthik December 16, 2025

CISA Adds Gladinet Crypto Flaw and Apple WebKit Zero-Days to KEV Catalog

CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with critical flaws in Gladinet CentreStack/Triofox and Apple WebKit components, confirming active real-world exploitation that demands immediate remediation across enterprise and…

PravinKarthik December 16, 2025