What's Happening In Cyber

• CTIN Community Cyber Calls - Thursday - 10 AM
  • email scott@penncyber.com if you're not on the calendar.
• January 14- Central PA Happy Hour (Harrisburg) Als of Hampden 5:00pm to 8:00pm

Hosting an event - Let us know at events@penncyber.com

CTIN Update - React2Shell Patch 

A critical vulnerability known as React2Shell is rapidly escalating into a large-scale global exploitation campaign, prompting urgent warnings from U.S. and international cybersecurity authorities. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to remediate the flaw by December 12, 2025, underscoring the severity and active exploitation of the issue.

Tracked as CVE-2025-55182 with a CVSS score of 10.0, the vulnerability impacts the React Server Components (RSC) Flight protocol and stems from unsafe deserialization. Exploitation allows an attacker to inject malicious logic that executes in a privileged server context. The exposure extends well beyond React itself, affecting widely deployed frameworks such as Next.js, Waku, Vite, React Router, and RedwoodSDK.

READ MORE...