ICYMI: 2025-12-06
Latest Headlines
Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks
Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation
Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
Security News This Week: Oh Crap, Kohler’s Toilet Cameras Aren’t Really End-to-End Encrypted
New FvncBot Android Banking Attacking Users to Log Keystrokes and Inject Malicious Payloads
Researchers Hack Google’s Gemini CLI Through Prompt Injections in GitHub Actions
2.15M Web Services Running Next.js Exposed Over Internet, Active Exploitation Underway – Patch Now
Avast Antivirus Sandbox Vulnerabilities Let Attackers Escalate Privileges
React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable
New wave of VPN login attempts targets Palo Alto GlobalProtect portals
– MTZ