Hacker interest is high in a days-old vulnerability in widely used web application framework React, with dozens of ...

A new report out today from artificial intelligence security startup Cyata Security Ltd. details a critical remote code ...

React vulnerability CVE-2025-55182 exploited by crypto-drainers to execute remote code and steal funds from affected websites ...

Over the past week, enterprise security teams observed a combination of covert malware communication attempts and aggressive probing of publicly exposed infrastructure. These incidents, detected ...

Huntress reports active attacks abusing Gladinet’s fixed cryptographic keys to forge tickets and gain remote code execution ...

Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...

An unauthenticated user can execute the attack, and there’s no mitigation, just a hotfix that should be applied immediately.

React2Shell flaw under active attack exposes thousands of React and Next.js apps to remote code execution, forcing urgent ...

An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code ...

The critical React2Shell flaw actively exploit crypto miners, backdoors and advanced malware globally, urging for an ...

Windows Server 2025 is currently open to a Remote Code Execution exploit via the Windows Update Service, and at the time of this writing a fix from Microsoft has yet to fully patch the issue. Reports ...

In the remote maintenance software Connectwise ScreenConnect, authenticated attackers can inject malicious code. An update is ...