🔒 Cybersecurity [9-Dec-2025]

 

Cybersecurity

Software Security & Vulnerabilities

• React2Shell Critical Vulnerability (CVE-2025-55182) Rapidly Exploited - CVE-2025-55182 shows rapid weaponization of critical vulnerabilities in widely-adopted React Server Components. Source: Cyble

• Amazon Warns of Chinese Hacker Exploitation of React2Shell - Amazon alerts to ongoing exploitation attempts targeting React2Shell vulnerability by Chinese threat actors. Source: Industrial Cyber

• CISA Adds React2Shell to Known Exploited Vulnerabilities Catalog - Critical React Server Components vulnerability officially added to CISA's Known Exploited Vulnerabilities (KEV) catalog. Source: GBHackers

Threat Intelligence & Incident Response

• Weekly Recap: USB Malware, React2Shell, WhatsApp Worms - ThreatsDay Bulletin covers emerging threats including USB malware, CastleRAT, and ransomware profit decline trends. Source: The Hacker News

• Check Point Research: December 8 Threat Intelligence Report - Detailed analysis of CVE-2025-55182 and emerging threat landscape affecting React 19.x deployments. Source: Check Point Research

Software & Vulnerability Management

• Critical Apache Tika XXE Vulnerability (CVE-2025-66516) - CVE-2025-66516 enables XXE injection attacks via crafted PDF files, affecting all platforms. Source: SecurityWeek

• Apache Tika XXE in GitLab Advisory Database - GitLab tracks XXE vulnerability in Apache Tika with expanded impact scope beyond initial CVE-2025-54988. Source: GitLab Advisory

Cybersecurity Governance & Compliance

• Cybersecurity Faced Major Overhaul in 2025 - 2025 marked significant government enforcement changes and cybersecurity policy overhauls in response to high-profile incidents. Source: This Week Health

CI/CD & DevSecOps

• CI/CD Tools Most DevSecOps-Friendly Assessment - Aqua Security highlighted containerized workload protection with image scanning, runtime defense, and compliance checks. Source: Medium

Free Cybersecurity Courses & Certifications

• UWF Florida Cybersecurity Training Program – Free Upskilling - Provides FREE cybersecurity training for eligible Florida employees across universities, colleges, K12, county, and city organizations. Source: University of West Florida

• Free CompTIA Security+ Practice Tests (SY0-701) - Simplilearn offers free Security+ practice tests simulating actual certification exam conditions. Source: Simplilearn