News Summary

CISA Updates Voluntary Cybersecurity Performance Goals for Critical Infrastructure The Cybersecurity and Infrastructure Security Agency has issued a new version of its voluntary Cybersecurity Performance Goals, introducing more granular, measurable…

CISA Updates Voluntary Cybersecurity Performance Goals For Critical Infrastructure The Cybersecurity and Infrastructure Security Agency has released an updated set of voluntary Cybersecurity Performance Goals for critical infrastructure operators, introducing…

OWASP Releases Top 10 Risks for Agentic AI Applications This week marks a pivotal moment in AI cybersecurity with the release of the OWASP Top 10 for Agentic Applications 2026,…

CISA Highlights Active Exploitation of GeoServer XXE Vulnerability CVE-2025-58360 A critical XML External Entity (XXE) vulnerability in GeoServer, tracked as CVE-2025-58360, is being actively exploited in the wild, prompting CISA…

Microsoft’s December 2025 Patch Tuesday: Deep Dive Into 56 Vulnerabilities And An Actively Exploited Zero‑Day Microsoft’s final Patch Tuesday of 2025 delivers fixes for 56 vulnerabilities across the Windows ecosystem,…

Critical React2Shell Vulnerabilities in React and Next.js RSC Implementations A set of critical vulnerabilities collectively dubbed React2Shell has been disclosed in the React Server Components (RSC) implementations used by major…

Critical React Server Components Vulnerability Triggers Widespread Incident Response A critical vulnerability in React Server Components (RSC) has escalated into an active security crisis, with organizations worldwide investigating potential compromises…

Microsoft’s December 2025 Security Updates Close Critical Office and Kernel Flaws Microsoft’s final Patch Tuesday of 2025 delivers fixes for a wide spectrum of vulnerabilities across Windows, Office, and core…

Microsoft’s December 2025 Patch Tuesday: 56 Vulnerabilities, Active Zero-Day, And Critical Office RCE Microsoft’s final Patch Tuesday of 2025 delivers fixes for 56 distinct vulnerabilities across core Windows components, Office,…

Microsoft December 2025 Patch Tuesday: Zero-Day in Cloud Files Driver and Critical RCE in PowerShell Summary: Microsoft’s December 2025 Patch Tuesday addresses 56 security vulnerabilities across Windows and associated software,…