Search: “Next.js”

45 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 29 Malware 14 Exploit / PoC 8 Ransomware 7 Threat actor 7 Data breach 6 Phishing & fraud 2 Policy & legal 1 Advisory 1 Industry 1 Tools 1 AI tools & infra 1

SeverityAll critical 45 high 20 medium 9 low 2 info 2

Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)

Help Net SecurityApr 2, 08:44 UTC · Apr 2, 2025Vulnerability in the wildCVE-2025-29927

60

Attackers can bypass middleware auth checks by exploiting critical Next.js flaw

Security AffairsMar 24, 11:22 UTC · Mar 24, 2025Vulnerability CVE-2025-29927

60

Researchers raise alarm about critical Next.js vulnerability

CyberScoopMar 24, 21:26 UTC · Mar 24, 2025Vulnerability CVE-2025-29927

60

Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks

The Hacker NewsMar 25, 03:16 UTC · Mar 25, 2025Vulnerability CVE-2025-29927

60

NCSC Urges Users to Patch Next.js Flaw Immediately

Infosecurity MagazineMar 31, 10:15 UTC · Mar 31, 2025Vulnerability CVE-2025-29927

60

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

The Hacker NewsDec 4, 15:38 UTC · Dec 4, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

60

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

The Hacker NewsApr 2, 19:30 UTC · Apr 2, 2026Vulnerability CVE-2025-55182

60

Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat Actors

Recorded FutureDec 9, 00:00 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-55182

60

Max-severity vulnerability in React, Node.js patched, update ASAP (CVE-2025-55182)

Help Net SecurityDec 4, 00:00 UTC · Dec 4, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

60

December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat Activity

Recorded FutureJan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182 CVE-2025-20393 CVE-2025-8110+1 CVEs

60

React2Shell under attack: RondoDox Botnet spreads miners and malware

Security AffairsJan 1, 14:31 UTC · Jan 1, 2026Malware CVE-2025-55182 CVE-2024-3721 CVE-2024-12856

60

Attackers hit React defect as researchers quibble over proof

CyberScoopDec 6, 17:14 UTC · Dec 6, 2025Ransomware in the wildCVE-2025-55182 CVE-2025-66478

60

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

The Hacker NewsDec 9, 06:18 UTC · Dec 9, 2025Exploit / PoC in the wildCVE-2025-55182

60

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs1

60

Inside Vercel’s sleep

CyberScoopJan 8, 23:01 UTC · Jan 8, 2026Ransomware CVE-2025-55182

60

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

The Hacker NewsJan 1, 09:19 UTC · Jan 1, 2026Malware CVE-2025-55182 CVE-2023-1389 CVE-2025-24893

60

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Exploit / PoC in the wildCVE-2025-55182 CVE-2021-44228

60

Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims

CyberScoopDec 11, 17:17 UTC · Dec 11, 2025Ransomware in the wildCVE-2025-55182

60

The Bug That Won't Die: 10 Years of the Same Mistake

Recorded FutureDec 9, 00:00 UTC · Dec 9, 2025Exploit / PoC CVE-2025-55182 CVE-2025-66478 CVE-2015-4852

60

Developers scramble as critical React flaw threatens major apps

CyberScoopDec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-66478

60

The democratisation of business email compromise fraud

Cisco TalosApr 2, 18:02 UTC · Apr 2, 2026Phishing & fraud in the wildCVE-2025-55182

60

Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Vulnerability CVE-2025-59466 CVE-2025-55131 CVE-2025-55130+1 CVEs

60

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

The Hacker NewsDec 11, 04:19 UTC · Dec 11, 2025Malware CVE-2025-55182

60

Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot

Help Net SecurityMar 30, 00:00 UTC · Mar 30, 2025Ransomware CVE-2025-2783 CVE-2025-2857 CVE-2025-2825+1 CVEs1

60

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

The Hacker NewsAug 7, 06:50 UTC · Aug 7, 2026Threat actor

60

Chinese Threat Actors Weaponize New Vulnerabilities in Under a Day

Infosecurity MagazineAug 3, 15:00 UTC · Aug 3, 2026Vulnerability in the wild

60

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water

The Hacker NewsAug 3, 14:03 UTC · Aug 3, 2026Data breach CVE-2026-42897 CVE-2026-66066

60

May 2026 CVE Landscape

Recorded FutureJun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250 CVE-2009-1537 CVE-2009-3459+19 CVEs

60

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

The Hacker NewsMay 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897 CVE-2026-20182 CVE-2026-20127

60

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More

The Hacker NewsMay 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973 CVE-2026-0300

60

Vercel attack fallout expands to more customers and third

CyberScoopApr 23, 22:05 UTC · Apr 23, 2026Data breach in the wild1

60

Vercel's security breach started with malware disguised as Roblox cheats

CyberScoopApr 20, 20:24 UTC · Apr 20, 2026Malware in the wild

60

Vercel breached via compromised third-party AI tool

Help Net SecurityApr 20, 00:00 UTC · Apr 20, 2026Data breach

60

RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attempts

Security AffairsMar 17, 15:02 UTC · Mar 17, 2026Malware in the wildCVE-2023-1389 CVE-2024-3721 CVE-2024-12856+2 CVEs

60

More than half of public vulnerabilities bypass leading WAFs

Help Net SecurityFeb 18, 05:11 UTC · Feb 18, 2026Vulnerability CVE-2025-55182

60

Security Affairs newsletter Round 559 by Pierluigi Paganini

Security AffairsJan 18, 13:46 UTC · Jan 18, 2026Exploit / PoC in the wild

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174 CVE-2025-43529 CVE-2025-6218+43 CVEs

60

New EtherRAT backdoor surfaces in React2Shell attacks tied to North Korea

Security AffairsDec 10, 14:45 UTC · Dec 10, 2025Malware CVE-2025-55182

60