December 2025: Coupang & WIRED Data Leaks, Record DDoS, React2Shell Exploitation

December 2025 saw a convergence of high-impact threats: Cloudflare mitigated a record 29.7 Tbps DDoS attributed to the AISURU botnet; multiple large-scale data exposures and breaches impacted millions of users (Coupang 33.7M, 700Credit 5.8M, University of Phoenix 3.5M, WIRED 2.3M) often via vendor or third-party access; the critical React2Shell RCE (CVE-2025-55182 and related Next.js issue) was actively exploited across 30+ organizations with attributed state-linked activity deploying Snowlight and Vshell; supply-chain/vendor compromises and ransomware-related data theft (Marquis) increased downstream risk; crypto incidents (Unleash multisig takeover, Trust Wallet extension compromise) and social-engineering/malware delivery frameworks (ErrTraffic) further amplified impact and attacker capabilities.