Sans Newsbites for December 12, 2025: CVE numbers and many CVSS scores of 9s and 10s

Hello gang, welcome to the Sans News Bites podcast covering the newsletter for December 12, 2025.I know, we should've been continuing to release, but I also have been involved in other things too and taking some time off, but we plan on catching up as there are no meetings we need to attend until next year.I've also been learning about how the RSS features work on getting things linked, and its not as simple as putting the links in place in HTML so we'll continue to improve our show notes and make them better. Do you want to read what is in the newsletter? here is the link to December 12, 2025 if you want to read it. Here's what is in the top of the news. Microsoft Patch Tuesday for December 2025 Includes Exploited Zero-Day Patch Fortinet, Ivanti, and SAP Products for Critical Flaws Patch Fortinet, Ivanti, and SAP Products for Critical Flaws Adobe Security Bulletins Here's the rest of the news Google Patches (Another) Chrome Zero-day Unpatched Gogs Vulnerability is Being Actively Exploited IBM Security Bulletins CISA and Partners Warn of Attacks Against Critical Infrastructure Gartner Warns CISOs to Block AI Browsers Former Accenture Senior Manager Allegedly Lied About Security Control Compliance Pierce County Library System Will Notify 340,000 Individuals Affected by April 2025 Data Breach I hope that you all enjoy the program as much as I am bringing it together for you. Remember, this program reads the news items, and comments on them. We will bring in the editors if they say something I'm thinking as I'm reading the thing. Its quoted in the braille too.Let me know if these show notes are better than past ones. Thanks for listening, make it a great day!