Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks
Published: Dec 13, 2025
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a high-severity flaw (CVE-2018-4063) in Sierra Wireless AirLink ALEOS routers to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation in the wild, allowing remote code execution via unrestricted file uploads.
2. Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Published: Dec 13, 2025
Apple released security updates for iOS, macOS, and other platforms to patch two WebKit vulnerabilities (CVE-2025-43529 and CVE-2025-14174), one of which was exploited in targeted attacks and previously patched by Google in Chrome.
3. Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads
Published: Dec 12, 2025
Cybercriminals are using fake GitHub repositories themed as OSINT tools and GPT utilities to distribute PyStoreRAT, a JavaScript-based Remote Access Trojan (RAT) that downloads and executes malicious HTA files, with capabilities to steal data and deploy additional malware like Rhadamanthys.
4. New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale
Published: Dec 12, 2025
Four new phishing kits—BlackForce, GhostFrame, InboxPrime AI, and Spiderman—are being used to steal credentials and bypass multi-factor authentication (MFA) through Man-in-the-Browser attacks, with BlackForce alone impersonating over 11 brands and sold on Telegram for €200-€300.
5. New React RSC Vulnerabilities Enable DoS and Source Code Exposure
Published: Dec 12, 2025
The React team patched two vulnerabilities in React Server Components (RSC), CVE-2025-55184 and CVE-2025-67779, which allow denial-of-service (DoS) attacks via unsafe deserialization, and CVE-2025-55183, which could leak source code through crafted HTTP requests.
6. React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation
Published: Dec 12, 2025
The critical React2Shell vulnerability (CVE-2025-55182, CVSS 10.0) in React Server Components is being widely exploited globally, allowing unauthenticated remote code execution, prompting CISA to urge federal agencies to patch by December 12, 2025.
7. CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog
Published: Dec 12, 2025
CISA added CVE-2025-58360, an unauthenticated XML External Entity (XXE) vulnerability in GeoServer (CVSS 8.2), to its KEV catalog due to active exploitation, affecting versions prior to 2.25.5 and certain later releases, with patches available in versions 2.25.6 and above.
8. ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More Stories
Published: Dec 11, 2025
This weekly bulletin covers a range of cybersecurity incidents, including spyware infiltration in movie downloads and browser add-ons, Mirai botnet attacks, Docker leaks, and the ValleyRAT rootkit, highlighting the growing risks in digital systems.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using reliable sources like The Hacker News to stay ahead of vulnerabilities and automate security measures. Stay safe online!