IR Trends Q4 2025: Exploitation remains dominant, phishing campaign targets Native American tribal organizations

🗓️ 29 Jan 2026 11:00:07Reported by Dave LiebenbergType

talosblog🔗 blog.talosintelligence.com👁 22 Views

Threat actors exploit public-facing apps; phishing targets Native American tribal organizations.

Reporter	Title	Published	Views	Family All 1013
vulnersOsv	@4399ywkf/router (>=0.0.1, <=0.0.4), @akash-aw/aw-wizard-forms (4.14.0) +129 more potentially affected by CVE-2025-55182 via @modern-js/utils (>=2.65.2, <=2.69.2)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +294 more potentially affected by CVE-2025-55182 +1 more via next (>=15.3.0, <=15.3.5)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	@adenta/cms (>=0.0.6, <=1.1.1-0), @alisonquinter17/alieta-ui (0.1.0) +124 more potentially affected by CVE-2025-55182 +1 more via next (>=15.4.0-canary.17, <=15.4.7)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	@redwoodjs/sdk (>=0.0.63-test.2, <=0.0.79), @storybook/experimental-nextjs-rsc (>=0.0.0-pr-31893-sha-392fa9a5, <=0.0.0-pr-31893-sha-f0bf2189) +1 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.2.0-canary-39cad7af-20250411)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	@accounter/client (>=0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, <=0.0.3-alpha-20241210194047-ed4829d58a27c1aa9634b834f5d56d78ce8c68fd), @admiral.nelson/smart-catalyst (>=1.0.19, <=1.0.24) +255 more potentially affected by CVE-2025-55182 +1 more via next (>=14.3.0-canary.24, <=15.0.4-canary.39)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.0.0-rc-6230622a1a-20240610)	3 Dec 202519:07	–	vulnersosv
vulnersOsv	@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.0.0-rc-6230622a1a-20240610)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	@redwoodjs/sdk (>=0.0.63-test.2, <=0.0.79), @storybook/experimental-nextjs-rsc (>=0.0.0-pr-31893-sha-392fa9a5, <=0.0.0-pr-31893-sha-f0bf2189) +1 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.2.0-canary-39cad7af-20250411)	3 Dec 202519:07	–	vulnersosv
vulnersOsv	@071yoon/log-console-core (0.1.0), @adarshanatia/init-web (>=1.0.0, <=1.0.1) +124 more potentially affected by CVE-2025-55182 +1 more via next (>=16.0.0, <=16.0.6)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +300 more potentially affected by CVE-2025-55182 +1 more via next (>=15.1.0, <=15.1.8)	3 Dec 202516:39	–	vulnersosv

29 Jan 2026 11:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.110

EPSS0.99802

SSVC

public facing applications exploitation campaigns phishing campaigns native american tribal organizations credential harvesting