A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate ...

A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication with the ...

The malicious fork, named ‘lotusbail’ has all the same functionality as the legitimate project, but it also steals WhatsApp authentication tokens and session keys. Furthermore, it intercepts and ...

From being extra careful with your browsing habits to downloading the latest security apps, here are the ways you can ...

Attackers are exploiting a Flight protocol validation failure that allows them to execute arbitrary code without ...

Amazon Q Developer is a useful AI-powered coding assistant with chat, CLI, Model Context Protocol and agent support, and AWS ...

CISA warns that attackers are actively exploiting the React2Shell CVE-2025-55182 flaw, urging fast patching across vulnerable ...

The majority of crypto exploits in the coming year won’t be caused by a zero-day bug in your favorite protocol, say crypto ...

Microsoft's November 2025 Visual Studio Code update (version 1.107) advances multi-agent orchestration for GitHub Copilot and ...

Plus critical critical Notepad++, Ivanti, and Fortinet updates, and one of these patches an under-attack security hole ...

This article contains 10 of what we believe to be the biggest stories we covered throughout the year on SD Times.