Cybersecurity News - Page 36

Attackers are abusing the flaw to achieve remote code execution in applications using React Server Components.

Arctic Wolf said it observed active intrusions involving malicious single sign-on (SSO) logins on December 12.

The activity has been observed between 2021 and 2025 and has been attributed “with high confidence” to Russia’s GRU.

Phantom Stealer is capable of harvesting sensitive data from cryptocurrency wallets, browsers, and desktop apps.

GTIG also observed multiple incidents, in which threat actors exploited CVE-2025-55182 to deploy XMRig.

VolkLocker’s encryptor relies on a hardcoded master key embedded directly in the malware binary.

One of the flaws is the same issue Google addressed last week in its Chrome browser.

In brief: Hackers are increasingly exploit the React2Shell flaw, Google, Microsoft and others patch zero-days in their products, and more.

Google withheld technical details, including the CVE identifier, saying coordination is still underway.

Victoria Dubranova, aka “Vika,” “Tory,” and “SovaSonya,” was extradited to the United States earlier this year.