Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks
Published: 2025-12-06
Over 30 security vulnerabilities have been disclosed in various AI-powered IDEs that combine prompt injection with legitimate features to achieve data exfiltration and remote code execution. The flaws, named IDEsaster, affect popular tools like Cursor, GitHub Copilot, and others, with 24 assigned CVEs.
2. Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation
Published: 2025-12-06
CISA added CVE-2025-55182 (CVSS 10.0), a remote code execution flaw in React Server Components, to its KEV catalog due to active exploitation. The vulnerability arises from insecure deserialization in the Flight protocol, allowing unauthenticated attackers to execute arbitrary code.
3. Apple, Google Send New Round of Cyber Threat Notifications to Users Around World
Published: 2025-12-06
Apple and Google have sent a new round of cyber threat notifications to users around the world. The companies announced their latest effort to insulate customers against surveillance threats.
4. Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails
Published: 2025-12-05
A new agentic browser attack on Perplexity’s Comet browser can wipe a user’s entire Google Drive via crafted emails without user interaction. The technique exploits excessive agency in LLM-powered assistants to perform destructive actions based on automated prompts.
5. Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability
Published: 2025-12-05
China-linked groups Earth Lamia and Jackpot Panda are exploiting CVE-2025-55182 (React2Shell, CVSS 10.0) for unauthenticated remote code execution shortly after its disclosure. The flaw has been addressed in React versions 19.0.1, 19.1.2, and 19.2.1.
6. CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems
Published: 2025-12-05
CISA detailed the BRICKSTORM backdoor used by PRC state-sponsored actors for persistence in VMware vSphere and Windows environments. Written in Golang, it provides interactive shell access and supports multiple C2 protocols like HTTPS and WebSockets.
7. Aisuru Botnet Powers Record DDoS Attack Peaking at 29 Tbps
Published: 2025-12-05
Cloudflare recently mitigated a new record-breaking Aisuru attack that peaked at 14.1 Bpps.
8. International Takedown of Cryptocurrency Fraud Network Laundering Over EUR 700 Million
Published: 2025-12-04
An international operation dismantled a cryptocurrency fraud and money laundering network that laundered over EUR 700 million. The coordinated actions across multiple jurisdictions concluded years of investigation.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using tools like vulnerability scanners to monitor your systems for emerging risks and automate security patches. Stay safe online!