Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.12.28.md

Tracking malicious code execution in Python - https://rushter.com/blog/python-code-exec/

Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309) - https://blog.amberwolf.com/blog/2025/august/advisory---netskope-client-for-windows---local-privilege-escalation-via-rogue-server/

Hidden in Plain Sight: A Misconfigured Upload Path That Invited Trouble - https://www.varonis.com/blog/misconfigured-upload-path

What's Next: React2Shell Beyond Next.js - https://www.vulncheck.com/blog/react2shell-beyond-nextjs

Microsoft Defender for Identity Recommended Actions: Remove non-admin accounts with DCSync permissions - https://thalpius.com/2025/09/23/microsoft-defender-for-identity-recommended-actions-remove-non-admin-accounts-with-dcsync-permissions/

#informatyka