PP091: News Roundup–Securing MCP, Hunting Backdoors, and Getting the Creeps From AI Kids’ Toys
The 2025 news roundup highlights a browser extension exploit campaign, ongoing React2Shell vulnerabilities, and debates on surveillance camera maker's security pledges.
MAIN POINTS
- Browser extensions were used in a years-long campaign to steal credentials and inject malicious content.
- React2Shell vulnerability continues to be exploited, posing ongoing security challenges.
- Surveillance camera makers' security pledges are under scrutiny and debate.
- The roundup includes a mix of positive and negative security developments from 2025.
TAKEAWAYS
- Vigilance is crucial in monitoring browser extensions for potential security threats.
- React2Shell remains a significant concern requiring continuous attention and mitigation.
- The integrity of surveillance technology manufacturers is increasingly questioned.
- The security landscape in 2025 presents both advancements and persistent challenges.