Adrian Grigorof

🚨 DEADLINE ALERT: CISA Remediation Due Today (Dec 11, 2025) Today is the mandatory deadline to remediate CVE-2025-55182, the critical "React2Shell" Remote Code Execution (RCE) vulnerability. This flaw is currently seeing active exploitation in the wild. Immediate Action Required: If your environment runs React Server Components or Next.js, you must upgrade to the following patched versions immediately: React (react-server-dom-*): Upgrade to 19.0.1, 19.1.2, or 19.2.1+ Next.js: Upgrade to 15.0.5, 15.1.9, 15.2.6, 15.3.6, 15.4.8, 15.5.7, or 16.0.7+ As shown in the attached screenshot from the WhatCyber platform, this vulnerability is listed in CISA's KEV catalog with a strict due date of today. Failure to patch exposes your infrastructure to unauthenticated remote compromise. Don't let these deadlines slip. Track real-time exploitation status, patch availability, and CISA KEV mandates directly on WhatCyber.com. #React2Shell #CVE202555182 #CISA #VulnerabilityManagement #CyberSecurity #NextJS

1

A foreign threat actor infiltrated the Kansas City National Security Campus (KCNSC), a key manufacturing site within the National Nuclear Security Administration (NNSA), exploiting unpatched Microsoft SharePoint vulnerabilities, according to a source involved in an August incident response at the facility. The breach targeted a plant that produces the vast majority of critical non-nuclear components for US nuclear weapons under the NNSA, a semi-autonomous agency within the Department of Energy (DOE) that oversees the design, production, and maintenance of the nation’s nuclear weapons. Honeywell Federal Manufacturing & Technologies (FM&T) manages the Kansas City campus under contract to the NNSA. https://lnkd.in/giNSG9P5

22

1 Comment

Alpheratz has been awarded a contract to modernize cyber intelligence systems of the National Police of Ecuador.  Solutions include Magnet Forensics (Axiom and Graykey), MSAB (XRY Pro) and specialized training. #Magnetforensics #MSAB #Cyber #Intelligence #Forensics #Technology

43

FutureCon CyberSecurity Events Tampa confirmed something many teams are still underestimating: AI adoption is moving faster than secure implementation. ⚠️🤖 At #FutureCon Tampa, our CEO Angela Polania, CPA, CISM, CISA, CRISC, CAISS, CMMC RP joined Joseph Cortese and the A-LIGN team for a session on AI Security in the Real World: Today’s Exploits, Practical Frameworks, and Audit-Ready Controls, focused on turning AI-specific risk into practical cybersecurity controls. A few themes stood out across the event: • AI expands the attack surface through agents, tools, APIs, file systems, and data pipelines, not just the model itself. • In RAG environments, untrusted content can shape trusted output, making prompt injection and context isolation real security priorities. • Strong AI security depends on practical controls such as least privilege, tool sandboxing, human approval for high-impact actions, and auditable governance frameworks. • A mature AI program is not built on hype, but on layered frameworks, continuous assurance, and real operational discipline. 💡One of the clearest takeaways for us was this: junior developers are often adopting AI tools faster than senior teams, but that speed can also create more exposure. When systems are built quickly without the same depth of security judgment, the result can be faster innovation and more vulnerable code. That is the tension many organizations are facing right now: moving quickly with AI while still needing governance, security maturity, and controls that can hold up under real scrutiny. 🛡️ Swipe for highlights from FutureCon Tampa. ▶️ Follow us for more insights on AI security, cybersecurity governance, and audit-ready control programs. 🚀 #AIGovernance #RiskManagement #ISO42001 #AgenticAI #RAGSecurity #SecurityLeadership #AuditReadiness #ElevateConsult #ALIGN

8