Critical CVEs

CVE-2025-14847 — Unauthorized read of heap memory CVSS 8.7

mongodb server

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client.

CVE-2025-68613 — Authenticated arbitrary code execution vulnerability CVSS 8.8

n8n workflow automation

Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations.

CVE-2025-68664 — Serialization injection vulnerability CVSS 9.3

langchain core

The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data.

Top Security News

President Trump Orders Divestment in $2.9 Million Chips Deal to Protect US Security Interests News

President Donald Trump on Friday ordered the unraveling of a $2.9 million computer chips deal that he concluded threatened U.S. security interests if the current owner, HieFo Corp., remained in control of the technology.

Source: SecurityWeek

Nearly 480,000 impacted by Covenant Health data breach News

A cyberattack last year exposed the sensitive information of 478,188 people, the Catholic healthcare organization Covenant Health said. Hackers breached the organization’s network and stole patients’ names, addresses, dates of birth, medical record numbers, Social Security numbers, health insurance information, and treatment information like diagnoses, dates of treatment, and types of treatment.

Source: The Record

Over 10K Fortinet firewalls exposed to actively exploited 2FA bypass News

Over 10,000 Fortinet firewalls are still exposed online and vulnerable to ongoing attacks exploiting a five-year-old critical two-factor authentication (2FA) bypass vulnerability. Fortinet released FortiOS versions 6.4.1, 6.2.4, and 6.0.10 in July 2020 to address this flaw (tracked as CVE-2020-12812) and advised admins who couldn't immediately patch to turn off username-case-sensitivity to block 2FA bypass attempts targeting their devices.

Source: BleepingComputer

Ransomware Activity

SEACSUB S.p.a. Ransomware

The threat actor Qilin claims responsibility for a ransomware attack against the victim in the manufacturing sector on December 29.

Seac Ransomware

The threat actor Qilin claims responsibility for a ransomware attack against the victim in the financial sector on December 28.

What we shipped at 8BitSecurity

• Insights: How Call and SMS Spoofing Works - and Why It Is So Easy
• Insights: Securing Wi-Fi Cameras: Technical Guide and Best Practices