Three hacking groups, two vulnerabilities and all eyes on China Summary Researchers at Pwn2Own showed remote compromise of Microsoft on-premise SharePoint in March, revealing two critical vulnerabilities. Instead of staying…
Russian police bust bank-account hacking gang that used NFCGate-based malware Summary Russian police say they have dismantled a group that stole millions from bank customers using malware built on NFCGate,…
Novel clickjacking attack relies on CSS and SVG Summary Security researcher Lyra Rebane has devised and demonstrated a new clickjacking technique that uses SVG filters and CSS to read and…
Cloudflare blames Friday outage on borked fix for React2shell vuln Summary Cloudflare says a botched attempt to detect and mitigate the newly disclosed React2Shell vulnerability (CVE-2025-55182) triggered a configuration change…
React2Shell Vulnerability Under Attack from China-Nexus Groups Summary CVE-2025-55182 (nicknamed “React2Shell”) is a maximum-severity unauthenticated remote code execution (RCE) bug in React Server Components affecting several react-server-dom packages and React…
Beijing-linked hackers are hammering max-severity React bug, AWS warns Summary AWS has warned that China-linked state-nexus threat groups began actively exploiting a critical React Server Components vulnerability (CVE-2025-55182), dubbed “React2Shell”,…
PRC spies Brickstormed their way into critical US networks and remained hidden for years Summary US and Canadian agencies, plus multiple security firms, warn that China-linked cyber operators used a…
PRC spies Brickstromed their way into critical US networks and remained hidden for years Summary Chinese state-linked actors used a sophisticated backdoor called Brickstorm to gain long-term access to multiple…
CISA Warns of ‘Ongoing’ Brickstorm Backdoor Attacks Summary The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert about “ongoing intrusions” by PRC-linked actors using the Brickstorm backdoor…
CISA, NSA warn of China’s BRICKSTORM malware after incident response efforts Summary U.S. and Canadian cyber authorities — CISA, the NSA and the Canadian Centre for Cyber Security — released…
