In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...

Warnings continue to mount over a critical vulnerability in the widely used web application framework React, with threat intelligence analysts warning that it's ...

SEAL Security researchers warned that a critical React flaw fueled a surge in wallet-draining attacks on crypto websites.

As they work to fend off the rapidly expanding number of attempts by threat actors to exploit the dangerous React2Shell vulnerability, security teams are learning of two new flaws in React Server ...

A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence ...

Attacks against CVE-2025-55182, which began almost immediately after public disclosure, have increased as more threat actors ...

Microsoft says attackers have already compromised "several hundred machines across a diverse set of organizations" via the ...

As organizations struggle to understand the impact of the React2Shell vulnerability, PacketWatch threat hunters have published a blog article, "Responding to React2Shell," detailing their experience ...

As exploitation activity against CVE-2025-55182, researchers are finding some exploits contain bypasses for Web application firewall (WAF) rules.

This week, likely North Korean hackers exploited React2Shell. The Dutch government defended its seizure of Nexperia. Prompt ...

Analysts warned CVE-2025-55182 could be a dangerous vulnerability – sadly, they were right, as Chinese hackers enjoy a field day of exploitation.