Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts

Dec 04, 2025Ravie LakshmananDDoS Attacks / Network Security Cloudflare on Wednesday said it detected and mitigated the largest ever distributed denial-of-service (DDoS) attack that measured at 29.7 terabits per second (Tbps). The activity, the web infrastructure and security company said, originated from a DDoS botnet-for-hire known as AISURU, which has been linked to a number […]

Continue Reading

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

Dec 03, 2025Ravie LakshmananVulnerability / Cloud Security A maximum-severity security flaw has been disclosed in React Server Components (RSC) that, if successfully exploited, could result in remote code execution. The vulnerability, tracked as CVE-2025-55182, carries a CVSS score of 10.0. It allows “unauthenticated remote code execution by exploiting a flaw in how React decodes payloads […]

Continue Reading

International Space Station Makes History As Eight Visiting Spacecraft Simultaneously Dock

In December 2025, the ISS reached a historic milestone with eight visiting spacecraft docked simultaneously for the first time. The lineup included Soyuz crew vehicles, Progress cargo ships, Japan’s HTV-X1, Northrop Grumman’s Cygnus, and two SpaceX Dragons. The rare configuration highlighted intense crew rotation operations and the ISS’s role as a global hub for…

Continue Reading

Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation

Dec 03, 2025Ravie LakshmananVulnerability / Endpoint Security Microsoft has silently plugged a security flaw that has been exploited by several threat actors since 2017 as part of the company’s November 2025 Patch Tuesday updates, according to ACROS Security’s 0patch. The vulnerability in question is CVE-2025-9491 (CVSS score: 7.8/7.0), which has been described as a Windows […]

Continue Reading

WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts

Dec 03, 2025Ravie LakshmananVulnerability / Website Security A critical security flaw impacting a WordPress plugin known as King Addons for Elementor has come under active exploitation in the wild. The vulnerability, CVE-2025-8489 (CVSS score: 9.8), is a case of privilege escalation that allows unauthenticated attackers to grant themselves administrative privileges by simply specifying the administrator […]

Continue Reading

Redmi 15C 5G First Impressions

The Redmi 15C 5G has finally made its way to the Indian market. It arrives as the successor to the Redmi 14C 5G, priced at Rs. 12,499 for the base model. The phone has a simple, functional design that is entirely different from its predecessor. It’s a fairly large smartphone, and the size is noticeable […]

Continue Reading