FREE DIAGNOSTIC

PC Desktops	PC Laptops	iMacs	Macbooks
	Home of the FREE Diagnostic (That's right. It's FREE) In 24 hours you will know the exact issues and cost of repair No work is done unless you approve it! It's not an estimate, it's a set price! All repairs are guaranteed! No appointment necessary (There is a Diagnostic charge for custom builds for component testing)

Threats/Scams

ConnectWise security advisory (AV25-840)
Serial number:AV25-840
Date:December 15, 2025

On December 11, 2025, ConnectWise published a security advisory to address a vulnerability in the following product:

ConnectWise ScreenConnect – versions prior to 25.8

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

ScreenConnect 25.8 Security Patch

ConnectWise - Latest Advisories
VMware security advisory (AV25-839)
Serial number:AV25-839
Date:December 15, 2025

Between December 8 and 14, 2025, VMware published security advisories to address vulnerabilities in multiple Tanzu products.

VMware Tanzu RabbitMQ on Kubernetes – versions prior to 4.1.6

VMware Tanzu RabbitMQ on Kubernetes – versions prior to 4.2.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

Product Release Advisory - VMware Tanzu RabbitMQ on Kubernetes 4.1.6

Product Release Advisory - VMware Tanzu RabbitMQ on Kubernetes 4.2.1

Security Advisories – Tanzu
[Control systems] CISA ICS security advisories (AV25–838)
Serial number:AV25–838
Date:December 15, 2025

Between December 8 and 14, 2025, CISA published ICS advisories to address vulnerabilities in the following products:

AzeoTech DAQFactory – release 20.7 (Build 2555) and prior

Festo Software LX Appliance – versions prior to June 2023

Grassroots DICOM (GDCM) – versions 3.0.24 and prior

Grassroots Simple TK – versions 2.5.2 and prior

Grassroots medlnria – versions 4.0 and prior

Johnson Controls iSTAR – multiple models and versions

Multiple India-based CCTV Cameras – D-Link DCS-F5614-L1, Sparsh Securitech and Securus

OpenPLC_V3 – versions prior to pull request #310

Siemens Advanced Licensing (SALT) Toolkit – multiple models and versions

Siemens Building X - Security Manager Edge Controller (ACC-AP) – all versions

Siemens Energy Services – all versions with G5DFR

Siemens Gridscale X Prepay – versions prior to 4.2.1

Siemens IAM Client – multiple models and versions

Siemens SINEMA Remote Connect Server – versions prior to V3.2 SP4

U-Boot – versions prior to 2017.11 on multiple Qualcomm chips

Varex Imaging Panoramic Dental Imaging Software – versions prior to 6.6.1.490

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

CISA ICS Advisories
Apple security advisory (AV25-837)
Serial number:AV25-837
Date: December 15, 2025

On December 12, 2025, Apple published a security update to address vulnerabilities in the following products:

iOS – versions prior to 26.2

iPadOS – versions prior to 26.2

iOS – versions prior to 18.7.3

iPadOS – versions prior to 18.7.3

macOS Tahoe – versions prior to 26.2

macOS Sequoia – versions prior to 15.7.3

macOS Sonoma – versions prior to 14.8.3

tvOS – versions prior to 26.2

watchOS – versions prior to 26.2

visionOS – versions prior to 26.2

Safari – versions prior to 26.2

Apple is aware that CVE-2025-14174 and CVE-2025-43529 are being exploited.

On December 12, 2025, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-14174 to their Known Exploited Vulnerabilities (KEV) Database. CISA added CVE-2025-43529 to the KEV on December 15, 2025.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

Apple Security Updates

Known Exploited Vulnerabilities Catalog | CISA
Ubuntu security advisory (AV25-836)
Serial number: AV25-836
Date: December 15, 2025

Between December 8 and 14, 2025, Ubuntu published security notices to address vulnerabilities in the Linux kernel affecting the following products:

Ubuntu 14.04 LTS

Ubuntu 16.04 LTS

Ubuntu 18.04 LTS

Ubuntu 20.04 LTS

Ubuntu 22.04 LTS

Ubuntu 24.04 LTS

Ubuntu 25.04

Ubuntu 25.10

The Cyber Centre encourages users and administrators to review the web link provided and apply the necessary updates.

Ubuntu Security Notices
IBM security advisory (AV25-835)
Serial number:AV25-835
Date:December 15, 2025

Between December 8 and 14, 2025, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

IBM Storage Defender - Resiliency Service – versions 2.0.0 to 2.0.18

IBM Guardium Data Protection – version 11.5

IBM Maximo Application Suite - Monitor Component – versions 9.1, 9.0, 8.11 and 8.10

IBM Edge Data Collector – versions 9.1, 9.0 and 8.11

IBM Observability with Instana (OnPrem) – versions Build 1.0.283 to 1.0.307

IBM OmniFind Text Search Server for DB2 for I – versions 1.7, 1.6 and 1.5

IBM Storage Defender - Data Protect – versions 2.0.0 to 2.0.18

IBM Business Automation Manager Open Editions – versions 9.0.0 to 9.3.0

IBM Storage Defender Copy Data Management – versions 2.2.0.0 to 2.2.27.0

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

IBM Product Security Incident Response