CVE-2025-55182

Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats

Multiple CVEs Expose Vulnerabilities in Cybersecurity Tools and Applications

Critical React2Shell RCE Vulnerability Disclosed by Meta

North Korean Hackers Exploit React2Shell Vulnerability in Crypto Sector

Dysphoria Botnet Infects 200,000 Devices Using Blockchain for C2 Operations

Remote Code Execution Vulnerability in Cal.com Exploited

Vect and TeamPCP Form Alliance for Ransomware Operations

Langflow AI Platform Targeted by RCE Exploitation

Cloud Attacks Shift Focus to Exploiting Software Vulnerabilities

OpenAI Codex Fails to Mitigate Linux Threats During Cyber Incident

Malicious npm Packages Exploit Strapi CMS, Compromise Credentials

Emerging Cyber Threats: CRPx0 Ransomware and TeamPCP Supply Chain Attacks

Critical React Flaw CVE-2025-55182 Exposes Major Security Risks

Chinese Hackers Exploit React2Shell Vulnerability

RondoDox Botnet Exploits React2Shell Flaw in Next.js Servers

Urgent Warning Issued Over Critical React Vulnerability CVE-2025-55182

North Korea-linked EtherRAT Malware Exploits React2Shell Vulnerability

Hackers Exploit React Native Metro Vulnerability to Target Developers

Gentlemen Ransomware Targets Global Industries Amid LLM Integration

Europe Launches GCVE Database for Cybersecurity Vulnerabilities

Google Alerts on Exploitation of React2Shell Vulnerability by Hacker Groups

Malicious GitHub Scanner for React2Shell CVE-2025-55182 Discovered

High-Severity Vulnerability in Open WebUI Exposes Users to Account Takeover

Wiz Launches AI-Accelerated Security for FedRAMP High Environments

Cyber Threat Landscape in Finance Sector: Key Trends Identified

52% of Public Vulnerabilities Bypass Leading WAFs, Reports Miggo Security

AI-Generated React2Shell Malware Discovered by Researchers

Escalation of React2Shell Exploitation Following CVE-2025-55182 Disclosure

Threat Actors Compromise NGINX Servers to Redirect Web Traffic

Hackers Exploit Misconfigured Proxies to Access LLM Services

Surge in Exploitation of React Vulnerability CVE-2025-55182

ILOVEPOOP Toolkit Targets React2Shell Vulnerability for Exploitation

2026 GreyNoise Report Reveals New Exploitation Patterns

8.1 Million Attack Sessions Target React2Shell Vulnerability

TeamPCP (UNC6780): From Telegram Data Broker to Supply Chain Cascade

Rebuilt in Six Days: Dysphoria IoT Botnet Hides on Blockchain to Defy Seizure

New Dysphoria DDoS botnet spreads to 200k devices worldwide

Weekly Threat Bulletin February 11th 2026

Dont Eat The Chocopocs How Vulnerability Researchers Were Repeatedly Targeted By Trojanised Exploits

Vect and TeamPCP partner for ransomware campaigns

Vect and TeamPCP partner for ransomware campaigns

ChocoPoc malware delivered via trojanized exploits on GitHub

New ChocoPoC malware targets researchers via trojanized PoC exploits

ChocoPoc malware delivered via trojanized exploits on GitHub

Prevent data exfiltration: AWS egress controls for cloud workloads

I also recommend reading Sylvie's blog post on React2Shell, and the shenanigans following it.

Chinese spy group caught lurking in Poland, Asia networks

What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

Codex Red: Untangling a Linux Incident With an OpenAI Twist (Part 2)

Link

Critical nginx UI tool vulnerability opens web servers to full compromise

Malicious npm packages, CISA budget cuts, hackers exploit React2Shell

Large-scale credential harvesting operation exploits React2Shell vulnerability

Security lapse lets researchers view React2Shell hackers’ dashboard

Attackers Abuse React2Shell Flaw to Compromise 700+ Next.js Hosts

UAT-10608: Inside a large

Google: Cloud attacks exploit flaws more than weak credentials

North Korean Hackers Breached Crypto Cloud Systems Using Front-End Exploit, New ...

Security firm reports suspected North Korean hackers targeting crypto firms

GreyNoise Releases 2026 State of the Edge Report: More Than Half of Remote Code ...

AI-generated React2Shell malware infects 90-plus hosts

ILOVEPOOP Toolkit Exploiting React2Shell Vulnerability to Deploy Malicious Payload

AI/LLM-Generated Malware Used to Exploit React2Shell

Hackers Exploiting React Server Components Vulnerability in the Wild to Deploy Malicious Payloads

The State of Cybersecurity in the Finance Sector: Six Trends to Watch

The State of Cybersecurity in the Finance Sector: Six Trends to Watch

The State of Cybersecurity in the Finance Sector: Six Trends to Watch

New EU Vulnerability Platform GCVE Goes Live, Reducing Reliance on Global Systems

Honeypots detect threat actors mass scanning LLM infrastructure

Threat Actors Actively Targeting LLMs