Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
According to Security NEXT, MongoDB's zlib implementation contains vulnerability CVE-2025-14847, which may allow external actors to read uninitialized server heap memory .
According to Security NEXT, Nagoya City received a report from a community welfare commissioner on December 3, 2025, that a senior citizen survey roster and questionnaires kept at the commissioner's home had been lost .
According to Security NEXT, on December 10, 2025, the Nara Prefectural Welfare Center for the Visually Impaired misdirected an email when contacting volunteer group members .
According to Security NEXT, Nippon Travel Agency and JR West discovered on November 28, 2025, that passenger records for certain TWILIGHT EXPRESS Mizukaze departures were missing from a data server .
According to Security NEXT, Keio University detected anomalous communications originating from a spam quarantine server at its Shonan Fujisawa Campus in late November 2025 .
According to Security NEXT, the Japan Consumer Credit Association surveyed 40 member companies and reported credit card fraud losses of approximately 10.
According to Security NEXT, LASSIC, operator of the remote talent service Remogu, detected an attack on November 11, 2025, finding traces of unauthorized operations on its server .
According to Security NEXT, Kanagawa Prefecture announced that Kizuki, a contractor for its support program for freelance workers with disabilities, sent a misaddressed email on December 3, 2025 .
According to Security NEXT, Ryokkyukai, the alumni association of Otaru University of Commerce, announced that one of its computers suffered an external intrusion, potentially exposing member personal data .
According to Security NEXT, Kawamoto Pump Mfg.
According to Security NEXT, on December 12, 2025, the Tokyo Metropolitan Government sent a webinar notification via its staff recruitment examinee portal to 9,086 applicants .
On 2025-12-23, Kuaishou issued a statement reporting that its livestreaming feature was targeted by an illicit cyberattack around 22:00 the previous evening .
On 2025-12-19, CISA added CVE-2025-14733 (WatchGuard Firebox) to its Known Exploited Vulnerabilities (KEV) catalog .
In an assessment published on December 18, 2025, the Danish Defence Intelligence Service (DDIS / FE) stated that Russia was responsible for a destructive cyberattack against a Danish water utility in 2024 .
The Danish Defence Intelligence Service (DDIS) assessed that Danish websites were targeted by a series of denial-of-service attacks in the run-up to the 2025 municipal and regional council elections .
On 2025-12-17, CISA added CVE-2025-40602 (SonicWall SMA1000 appliance) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-17, CISA added CVE-2025-20393 (Cisco Multiple Products) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-12-16, CISA added CVE-2025-59718 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-05, CISA added CVE-2025-55182 (Meta React Server Components) to its Known Exploited Vulnerabilities (KEV) catalog .
South Korea's Personal Information Protection Commission found that failures in managing authentication signing keys and access controls at Coupang led to the leak of about 37.