North Korea-linked attackers exploit CVE-2025-55182 to deploy EtherRAT, a smart-contract-based RAT with multi-stage ...
A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting ...
Security firms have seen cryptocurrency miners, Linux backdoors, botnet malware, and post-exploitation implants in ...
The critical React2Shell flaw actively exploit crypto miners, backdoors and advanced malware globally, urging for an ...
Wiz says React2Shell attacks accelerating, ranging from cryptominers to state-linked crews Half of the internet-facing ...
Sysdig finds evidence of Contagious Interview actors abusing React2Shell.
A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence ...
Sysdig has found sophisticated malicious campaigns exploiting React2Shell that delivered EtherRAT and suggested North Korean ...
A sophisticated cyber-espionage campaign attributed to North Korean state-linked hackers has exploited a critical vulnerability in React Server Components to deploy a stealthy remote access trojan ...
It has been seen spreading cryptojacking malware and in attempts to steal cloud credentials from compromised machines.
The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a ...