Cybersecurity

This Week in Cybersecurity: Microsoft Patch Tuesday, Pro-Russia Hacktivists Target Critical Infrastructure, and Nation-State Actors Weaponize React2Shell

Cybersecurity

This Week in Cybersecurity: Microsoft Patch Tuesday, Pro-Russia Hacktivists Target Critical Infrastructure, and Nation-State Actors Weaponize React2Shell

December 8-10, 2025 | Weekly Threat Intelligence Briefing Early this week, there is a critical convergence of threats: Microsoft's December Patch Tuesday addresses an actively exploited zero-day, a massive joint advisory warns of pro-Russia hacktivists targeting US critical infrastructure, North Korean actors deploy novel malware exploiting the React2Shell vulnerability,

This Week in Cybersecurity: React Zero-Day, China's BRICKSTORM Campaign, and Critical Infrastructure Under Siege

Cybersecurity

This Week in Cybersecurity: React Zero-Day, China's BRICKSTORM Campaign, and Critical Infrastructure Under Siege

December 3-5, 2025 | Weekly Threat Intelligence Briefing This week brought a cascade of high-severity vulnerabilities and coordinated nation-state attacks, underscoring the increasingly hostile threat landscape facing IT leaders. From a critical remote code execution flaw in React Server Components that triggered emergency patching across millions of websites, to a joint