A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale.

Everything you need to know about CVE-2025–55182 — how it works, who’s exploiting it, and what you must do right now

Since early December 2025, SOC teams in Japan have been observing a wave of attacks exploiting React2Shell (CVE-2025-55182)—a

The Flaw That Gives Hackers Your Server Keys

A new, sophisticated malware campaign is sweeping across the internet, leveraging a recently disclosed vulnerability to install cryptocurrency-stealing software on unsuspecting servers. The AhnLab…

A highly automated and ruthlessly efficient cyber-espionage campaign is tearing through the cloud infrastructure of modern web applications, leaving tens of thousands of compromised servers in its…

Summary

The RondoDoX botnet has resurfaced with a potent new arsenal, shifting its sights from simple routers to enterprise-grade web frameworks. A new intelligence report from CloudSEK details a sprawlin…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Threat actor uses React2Shell to deploy Sliver C2 on FortiWeb devices, using a Bangladesh Airforce decoy to target govt and financial sectors.

In December 2025, security researchers disclosed one of the most critical vulnerabilities ever discovered in the React ecosystem…

Breaking React Server Components felt way too easy today

Security analysts at Datadog have unmasked an ongoing traffic interception campaign targeting NGINX servers and hosting management interfaces,

Darktrace detects AI-generated "vibecoding" malware exploiting React2Shell (CVE-2025-55182). Attackers use AI to deploy XMRig miners on Docker.

This challenge is part of TryHackMe’s Love at First Breach 2026 Valentine event.

How Objects, Prototypes, and Constructors Form the Engine Behind Everything

The Critical RCE in React Server Components