Our final news roundup for 2025 is a holiday sampler of tasty, chewy (and a few yucky) confections. We look at a years-long exploit campaign that used browser extensions to steal credentials, inject malicious content, and track behavior; tracks ongoing exploits using the React2Shell vulnerability; and debates whether a surveillance camera maker&#8217;s pledge to follow<a class="excerpt-read-more" href="https://packetpushers.net/podcasts/packet-protector/pp091-news-roundup-securing-mcp-hunting-backdoors-and-getting-the-creeps-from-ai-kids-toys/" title="ReadPP091: News Roundup&#8211;Securing MCP, Hunting Backdoors, and Getting the Creeps From AI Kids&#8217; Toys">... Read more &#187;</a>