InfoSecBulletin Cybersecurity for mankind

The RondoDox botnet is using the serious React2Shell vulnerability (CVE-2025-55182) to infect unprotected Next.js servers with malware and cryptominers. RondoDox, a large-scale botnet first reported by Fortinet in July 2025, targets various n-day vulnerabilities in global attacks. In November, VulnCheck discovered new variants of RondoDox that exploit the critical remote …

Coupang, a South Korean e-commerce company, announced on Monday a 1.69 trillion won ($1.18 billion) compensation deal for 33.7 million affected accounts due to a major data leak, which upset users and lawmakers. Each customer will receive vouchers worth 50,000 won. Coupang founder Kim Bom apologized for last month’s data …

Employee data at Korean Air, South Korea’s largest airline, was leaked following a cyberattack on a partner firm that provides in-flight meals and onboard services, industry sources reported on Monday. According to the sources, Korean Air issued an internal notice earlier in the day informing employees that KC&D, the airline’s …