Critical React Exploits Surge; AI Phishing & New AI Browser

• New advanced phishing kits are leveraging artificial intelligence (AI) to craft highly convincing lures and employing sophisticated techniques to bypass multi-factor authentication (MFA).
• These kits, such as "PermaPhish," are designed for large-scale credential theft, often targeting enterprise users and critical accounts by dynamically generating phishing pages and emails.
• The integration of AI makes detection by traditional security measures more challenging, highlighting the evolving threat landscape for online credentials.

Source: The Hacker News | Date: December 12, 2025

• The integration of Generative AI (GenAI) directly into web browsers introduces novel security challenges, particularly concerning data exposure and the potential for model manipulation.
• Effective mitigation strategies for browser-based GenAI include implementing robust browser policies, strict isolation techniques for AI workloads, and granular data controls to prevent sensitive information leakage.
• Organizations must prioritize securing the browser environment to safely adopt GenAI tools, focusing on preventing prompt injection attacks and unauthorized access to user data.

Source: The Hacker News | Date: December 12, 2025

• Despite the active and widespread exploitation of critical React vulnerabilities, approximately half of all exposed React servers globally remain unpatched.
• This significant patching gap substantially increases the risk for organizations, as attackers continue to leverage known flaws such as React2Shell (CVE-2025-55182) to compromise systems.
• Security experts emphasize the urgent need for web administrators to identify and update all vulnerable React-based applications to prevent further compromise and data breaches.

Source: The Register | Date: December 12, 2025

• Google is developing an experimental browser named "Disco" that aims to fundamentally eliminate traditional tabs by generating entire web applications using artificial intelligence.
• Disco processes user prompts to create dynamic, AI-powered web experiences tailored to user intent, potentially reshaping how users interact with online content.
• This innovative approach focuses on AI-driven content generation and contextual browsing, potentially offering a more streamlined and intuitive user experience by transforming search into direct application interaction.

Source: SecurityOnline.info | Date: December 12, 2025

References

1. New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale - The Hacker News
2. Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work - The Hacker News
3. New React RSC Vulnerabilities Enable DoS and Source Code Disclosure - The Hacker News
4. New React vulns leak secrets, invite DoS attacks - The Register
5. React Patches Two New Flaws Risking Server-Crashing DoS and Source Code Disclosure - SecurityOnline.info
6. React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation - The Hacker News
7. Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide - CybersecurityNews.com
8. Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide - SecurityOnline.info
9. Half of exposed React servers remain unpatched amid active exploitation - The Register
10. Farewell, Tabs: Google’s Experimental Disco Browser Generates Web Apps with AI - SecurityOnline.info