Security Signals (12/02/25-12/16/25)

This curated security roundup lists numerous active and high-impact threats across December 2025 — including widespread exploitation of critical vulnerabilities (React2Shell, Fortinet, PowerShell, Apple zero-days), multiple phishing and AiTM campaigns targeting cloud identity providers, numerous infostealer and ransomware campaigns, and a massive MongoDB data exposure — signaling elevated attacker activity across cloud, endpoints and infrastructure.