Critical A pre-authentication remote code in React and Next.js - CVE-2025-55182 (React) and CVE-2025-66478 (Next.js)

Exploitation requires only a crafted HTTP request and has shown near-100% reliability in testing. The flaw stems from insecure deserialization in the RSC payload handling logic, allowing attacker-controlled data to influence server-side execution.

npm install next@latest or explicitly: npm install next@15.3.6

https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182

#ETB #1.3 billion lost to digital fraud and #cyberattacks has increased by #115%, according to the National Bank of Ethiopia.

https://ethiopianreporter.com/148976/
#cybersecurity #fraud #cyberattack #yekolotemari

CSEC Cybersecurity

🎉 Get Ready for Another Thrilling CTF Night! 💻🔐

Think you have what it takes to solve cybersecurity challenges and capture the flag? Join us this Monday for an exciting CTF!

📍 Location: B508, R10
🗓 Day Dec-29-2025 on MONDAY
🕒 Time: 2:30 night

🎯 What to Expect:
🏴‍☠️

Capture The Flag challenges

🚀 Challenges designed for both beginners and intermediate players so if you're just starting your cyber journey, this is your moment!

🧠 Learn, compete, grow your skills
👨‍💻 All skill levels welcome come try, have fun, and level up!

🚨 Don’t forget to bring your laptop! 🚨
⚠️ ⚠️ REGISTER ⬇️

REGISTER HERE

#CSEC_Cybersecurity #CSEC_ASTU #CTF_Night

🔥Sunday Tech Talk

🕵️‍♂️ Why Your Computer Is a Terrible Liar & Hackers Know It ?

Ever asked:

👉 “Did you eat my lunch?” 🍕

If they say “No” instantly , you believe them. If they pause… think look away then say “No” yeah, you already know the truth 😅

Guess what?

💻 Computers behave the exact same way.
This is where Timing Attacks come in⏱️

🎯 How hackers play the game:
Hacker tries a fake username: “Abc123”
❌ Server replies “Access Denied” in 0.1 seconds
Hacker tries “Abebe”
🤔 Server thinks: “Hmm… I know this name… let me check the database”
❌ Still says “Access Denied” but this time in 1.2 seconds

💡 Boom. Clue found.
Even though the message was the same, the time exposed the truth.

🧠 Big lesson
Hackers don’t just listen to what systems say. They measure how long it takes to say it.

Security isn’t always about stronger locks. Sometimes it’s about hiding your reaction time.

What do you think ?

👥 Join us:
🔗 LinkedIn
💬 Telegram
▶️ YouTube

- Cyber Security Division

#CyberSecurity #TimingAttack #CSEC_ASTU