Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat ActorsRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-5518260
Developers scramble as critical React flaw threatens major appsCyberScoop·Dec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-6647860
Critical React2Shell Flaw Added to CISA KEV After Confirmed Active ExploitationThe Hacker News·Dec 9, 06:18 UTC · Dec 9, 2025Exploit / PoC in the wildCVE-2025-5518260
December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat ActivityRecorded Future·Jan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182CVE-2025-20393CVE-2025-8110+1 CVEs60
U.S. CISA adds SmarterTools SmarterMail and React Native Community CLI flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Feb 6, 09:22 UTC · Feb 6, 2026Exploit / PoC in the wildCVE-2025-11953CVE-2026-2442360
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosureSecurity Affairs·Feb 3, 15:41 UTC · Feb 3, 2026Malware in the wildCVE-2025-11953160
Attacks on Kaspersky honeypots exploit CVE-2025Kaspersky Securelist·Dec 11, 07:30 UTC · Dec 11, 2025Exploit / PoC in the wildCVE-2025-5518260
Attackers hit React defect as researchers quibble over proofCyberScoop·Dec 6, 17:14 UTC · Dec 6, 2025Ransomware in the wildCVE-2025-55182CVE-2025-6647860
Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victimsCyberScoop·Dec 11, 17:17 UTC · Dec 11, 2025Ransomware in the wildCVE-2025-5518260
Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers sayThe Record·Dec 5, 16:22 UTC · Dec 5, 2025Exploit / PoC in the wildCVE-2025-5518260
Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm PackageThe Hacker News·Feb 6, 09:36 UTC · Feb 6, 2026Vulnerability in the wildCVE-2025-11953160
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and MoreThe Hacker News·Jul 28, 05:26 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-16232CVE-2025-66376CVE-2026-54121+52 CVEs60
React2Shell Under Active Exploitation by ChinaInfosecurity Magazine·Dec 8, 11:40 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-5518260
Java security: If you ain’t cheatin,’ you ain’t tryin’CyberScoop·Feb 19, 11:00 UTC · Feb 19, 2025Exploit / PoC in the wildCVE-2021-4422860
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.The Hacker News·Jun 2, 11:58 UTC · Jun 2, 2026Vulnerability in the wild60
React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency MitigationThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025Exploit / PoC in the wildCVE-2025-55182CVE-2021-4422860
June 2026 CVE LandscapeRecorded Future·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware in the wildCVE-2026-35616CVE-2026-25939CVE-2020-17103+53 CVEs60
Vulnerability landscape in Q4 2025Kaspersky Securelist·Mar 6, 10:00 UTC · Mar 6, 2026Vulnerability in the wildCVE-2018-0802CVE-2017-11882CVE-2017-0199+7 CVEs160
React2Shell fallout spreads to sensitive targets as public exploits hit allCyberScoop·Dec 18, 16:12 UTC · Dec 18, 2025Ransomware in the wildCVE-2025-55182CVE-2025-55183CVE-2025-67779+1 CVEs60
⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & MoreThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174CVE-2025-43529CVE-2025-6218+43 CVEs60
Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell VulnerabilityThe Hacker News·Dec 5, 16:12 UTC · Dec 5, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-31324CVE-2025-133860
Operational Cyber Threat IntelligenceRecorded Future·Nov 19, 00:00 UTC · Nov 19, 2025Exploit / PoC in the wild60
Beyond Vulnerability ManagementThe Hacker News·May 9, 16:51 UTC · May 9, 2025Vulnerability in the wild60
Mini Shai-Hulud returns, compromising hundreds of npm packagesCyberScoop·May 19, 21:21 UTC · May 19, 2026Data breach in the wild60
Colorado governor commutes prison sentence for election denier Tina PetersCyberScoop·May 15, 22:58 UTC · May 15, 2026Data breach in the wild160
Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacksCyberScoop·Feb 25, 13:30 UTC · Feb 25, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49706+1 CVEs60
Trump moves to pardon Colorado election clerk Tina Peters, even though he can’tCyberScoop·Dec 12, 16:16 UTC · Dec 12, 2025Data breach in the wild60
Maryland man faces federal charges for crimes allegedly linked to 764CyberScoop·Nov 12, 16:37 UTC · Nov 12, 2025Ransomware in the wild60
iframe Security Exposed: The Blind Spot Fueling Payment Skimmer AttacksThe Hacker News·Sep 24, 11:03 UTC · Sep 24, 2025Vulnerability in the wild60
GreyNoise enhances threat response with real-time blocklists, feeds, and SOAR integrationsHelp Net Security·Jul 31, 00:00 UTC · Jul 31, 2025Vulnerability in the wild60
Former Mesa County clerk sentenced to 9 years for 2020 voting system breachCyberScoop·Oct 4, 14:48 UTC · Oct 4, 2024Policy & legal in the wild60
UK and US share more vulnerabilities exploited by Russia's APT29 hackersThe Record·Dec 9, 00:00 UTC · Dec 9, 2022Vulnerability in the wildCVE-2018-13379CVE-2019-1653CVE-2019-2725+9 CVEs60
Decline in early cyber investments continues alongside coronavirus concernsCyberScoop·Jul 22, 14:01 UTC · Jul 22, 2020Exploit / PoC in the wild60
Here's the latest info operation to blame the U.S. for coronavirusCyberScoop·Apr 15, 12:00 UTC · Apr 15, 2020Exploit / PoC in the wild60
Do we need a 'cyber 911?' A former FBI cyber agent thinks so.CyberScoop·Aug 22, 13:53 UTC · Aug 22, 2018Exploit / PoC in the wild60
Russian hackers struck Clinton server hours after Trump called for emailsCyberScoop·Jul 13, 22:48 UTC · Jul 13, 2018Exploit / PoC in the wild60
Researchers found a semi-legit way to turn an Amazon Echo into a wiretapCyberScoop·Apr 26, 14:59 UTC · Apr 26, 2018Exploit / PoC in the wild60
Kaspersky Lab report: Evaluating the threat level of software vulnerabilitiesKaspersky Securelist·Feb 1, 14:30 UTC · Feb 1, 2013Vulnerability in the wild160
July 2026 CVE LandscapeRecorded Future·Aug 7, 00:00 UTC · Aug 7, 2026Ransomware in the wildCVE-2025-3248CVE-2008-4128CVE-2017-17215+78 CVEs160
Chinese Threat Actors Weaponize New Vulnerabilities in Under a DayInfosecurity Magazine·Aug 3, 15:00 UTC · Aug 3, 2026Vulnerability in the wild60