React2Shell flaw (CVE-2025-55182) exploited for remote code execution
The availability of exploit code will likely lead to more widespread opportunistic attacks
Tags: Threat Research, Featured, vulnerability, react2shell
Similar Posts
DOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAM
Bys sThe U.S. Department of Justice (DoJ) on Tuesday resentenced the former administrator of BreachForums to three years in prison in connection with his role in running the cybercrime forum and possessing child sexual abuse material (CSAM). Conor Brian Fitzpatrick (aka Pompompurin), 22, of Peekskill, New York, pleaded guilty to one count of access device conspiracy,…
Fake Nethereum NuGet Package Used Homoglyph Trick to Steal Crypto Wallet Keys
Bys sCybersecurity researchers have uncovered a new supply chain attack targeting the NuGet package manager with malicious typosquats of Nethereum, a popular Ethereum .NET integration platform, to steal victims’ cryptocurrency wallet keys. The package, Netherеum.All, has been found to harbor functionality to decode a command-and-control (C2) endpoint and exfiltrate mnemonic phrases, private keys, and
Anti-Israel cyberattack disrupts operations at Kelowna airport
Bys sStewart Lewis reports: Operations at the Kelowna, B.C., airport (YLW) were disrupted Tuesday evening after its passenger information screens and public address systems were overtaken in a terrorist cyberattack. The incident began about 5:15 p.m., when pro-Hamas messaging could be seen and heard throughout the airport. A message took over flight information screens announcing the system was……
Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Infects Over 6,000 Devices
Bys sUnpatched TP-Link Archer routers have become the target of a new botnet campaign dubbed Ballista, according to new findings from the Cato CTRL team. “The botnet exploits a remote code execution (RCE) vulnerability in TP-Link Archer routers (CVE-2023-1389) to spread itself automatically over the Internet,” security researchers Ofek Vardi and Matan Mittelman said in a…
Beware Of Shadow AI – Shadow IT’s Less Well-Known Brother
Bys sWhile AI tools can enable employees to be innovative and productive, significant data privacy risks can stem from their usage. The post Beware Of Shadow AI – Shadow IT’s Less Well-Known Brother appeared first on SecurityWeek.
International cybercrime tackled: Amsterdam police and FBI dismantle proxy service Anyproxy
Bys sIn a large-scale international investigation, the Amsterdam police, led by the Public Prosecution Service, and the American FBI have taken down the criminal proxy service Anyproxy. This service had been used by cybercriminals since 2004 to anonymously commit criminal acts, including phishing, ransomware attacks and data theft. Anyproxy has been used to shut down networks…