Vulnerability

Critical React flaw (CVE-2025-55182) enables pre-auth RCE in React Server Components Affects versions 19.0–19.2.0 and frameworks…

Two hacking groups with ties to China have been observed weaponizing the newly disclosed security flaw in React Server Components…

In a recent SC Media webcast , host Adrian Sanabria spoke with Justin Hazard, Principal Security Architect at AutoRABIT, about how…

Portugal and UK Move to Legalize Ethical Hacking for Security Researchers Portugal and the UK are taking steps to protect…

Within hours of the public disclosure of CVE-2025-55182 (React2Shell) on December 3, 2025, Amazon threat intelligence teams observed active exploitation…

The UK's National Cyber Security Center (NCSC) announced the testing phase of a new service called Proactive Notifications,…

Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now…

A critical remote code execution vulnerability in React.js has been identified. React.js is a JavaScript library for building…

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an “act now” critical alert regarding…

Critical React2Shell Exploit (CVE-2025-55182) Drives Large-Scale Attack Campaign A newly disclosed critical vulnerability, React2Shell (CVE-2025-55182), enables pre-authentication remote code execution…

Sophisticated FreePBX Attack Campaign Deploys Persistent "EncystPHP" Webshell A financially motivated hacker group, INJ3CTOR3, has launched a targeted…

Fortinet Disables FortiCloud SSO After Zero-Day Exploitation Fortinet temporarily disabled its FortiCloud Single Sign-On (SSO) service following the active exploitation…