React2Shell Hits: Spies, Miners, and Chaos Exploit React's Gaping Flaw
React was supposed to be the web's shiny armor. Now? React2Shell (CVE-2025-55182) lets hackers run wild with one HTTP poke. Spies and scammers are feasting.
#react2shell
UAT-10608's Automated Credential Grab: Next.js Apps Bleeding Secrets via React2Shell
Credentials pouring out. An automated campaign's hitting vulnerable Next.js setups, siphoning secrets faster than you can say 'patch management.' UAT-10608 doesn't mess around.
React2Shell: How a React Bug Turned 766 Servers into Credential Vaults
One HTTP request. That's all it took for hackers to burrow into 766 Next.js servers, siphoning credentials like SSH keys and AWS tokens. Cisco Talos just pulled back the curtain on this automated nightmare.