Date: December 2025Severity: CRITICAL Executive Summary This technical bulletin covers three critical attack vectors currently impacting organizations worldwide: the React2Shell vulnerability (CVE-2025-55182) actively exploited by

The week was marked by a concerning combination of critical vulnerabilities in identity components, browsers, and edge devices, alongside ransomware attacks and new software supply