Espresso

Sign in Subscribe

Cloudflare

React RCE CVE-2025-55182 Exploited by Botnets, BlackForce MFA Kit Emerges, Azure Linux Patched, AI Pen-Tester Artemis Rises

React RCE CVE-2025-55182 Exploited by Botnets, BlackForce MFA Kit Emerges, Azure Linux Patched, AI Pen-Tester Artemis Rises

TL;DR * CVE-2025-55182 Patched in React Server Components After 137,200 IPs Exposed to RCE via Flight Protocol * BlackForce Phishing Kit Sold on Telegram for €200–300 Uses Legitimate React Code to Bypass MFA Detection * Microsoft Azure Linux Affected by CVE-2025-49177 XFixes Extension Vulnerability Enabling Remote Code Execution * AI Agent

Windows 11 25H2 Update, Cloudflare WAF, and AI Code Assistants Hit Security Issues

Windows 11 25H2 Update, Cloudflare WAF, and AI Code Assistants Hit Security Issues

TL;DR * Microsoft’s Windows 11 25H2 update regression triggers File Explorer crashes and login issues on ~1% of consumers * Global Cloudflare WAF mis‑configuration on Dec. 5 caused 28 % of US traffic to return 500‑error pages * AI‑powered code assistants (Copilot, Cursor) vulnerable to prompt injections that can