Security BulletinsDec 10, 2025 · 10 min
Critical Alerts: React2Shell, Malicious VSCode Extensions, and Supply Chain Attacks
Date: December 2025 Severity: CRITICAL
Bruno Baldo
Security Bulletins
Security Bulletins
Security BulletinsNov 24, 2025 · 5 min
Executive Summary of the Week
The week was marked by a concerning combination of critical vulnerabilities in identity components, browsers, and edge devices, alongside ransomware attacks and new software supply chain attack vector
Bruno Baldo