Back Feeds2.Feedburner

32% of top

Feeds2.Feedburner •Sinisa Markovic • March 24, 2026

Exploitation timelines continued to compress in enterprise environments, with newly disclosed flaws reaching active use almost immediately and older weaknesses remaining active years after disclosure. (Source: Cisco Talos) Findings from Cisco Talos’ 2025 Year in Review show how attackers combined rapid weaponization with long-term exposure spanning infrastructure, identity systems, and user workflows. Top-targeted vulnerabilities show speed and persistence Newly disclosed vulnerabilities moved into active exploitation with little delay. React2Shell became the most targeted vulnerability of … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Rapid Exploitation of Vulnerabilities in 2025: Insights from Cisco Talos In 2025, Cisco's Talos reported a significant increase in the speed at which cybercriminals exploit vulnerabilities, particularly highlighting the React2Shell vulnerability disclosed in December 2025, which became the most-targeted vulnerability shortly after its release. Attackers have focused on identity control points, compromising systems like VPNs and application discovery controllers to facilitate lateral movement and bypass multi-factor authentication (MFA). Phishing remains a prevalent attack vector, with 40% of intrusion cases starting from successful phishing attempts, often utilizing sophisticated messages that mimic legitimate communications. The report also noted that AI is increasingly being used to enhance the effectiveness of cyberattacks, with predictions that it will become integral to cybercrime software. Talos emphasized the need for organizations to strengthen MFA policies and enhance anti-phishing training to combat these evolving threats. 8 sources 74

Extracted Entities

Malware (1)

React2Shell