Elastic has issued a critical security advisory for Kibana vulnerability CVE-2025-25012, allowing authenticated attackers to execute arbitrary code, scoring 9.9 on the CVSS scale. The flaw, stemming from prototype pollution in file uploads, affects versions 8.15.0 to 8.17.0. Immediate upgrading to version 8.17.3 is essential to mitigate risks, especially for data security and compliance.

Expanded BadBox botnet partly disrupted
The BadBox 2.0 malware botnet operation has been partially dismantled, affecting over 1 million Android devices worldwide. The joint operation, led by HUMAN’s Satori Threat