193 cybercrims arrested, accused of plotting ‘violence-as-a-service’ Summary Europol-led investigators have arrested 193 suspects across Europe in a six-month operation tackling so-called “violence-as-a-service” — networks that recruit, groom or coerce…
Researchers track dozens of organizations affected by React2Shell compromises tied to China’s MSS Summary Security researchers from Palo Alto Networks’ Unit 42 have confirmed that more than 30 organisations have…
This scientist found a new trick of the immune system by digging through cellular rubbish Summary Yifat Merbl and her team at the Weizmann Institute discovered that the cell’s proteasome…
The baby whose life was saved by the first personalised CRISPR therapy Summary KJ Muldoon — initially known to researchers as Patient Eta — became the first person to receive…
Three hacking groups, two vulnerabilities and all eyes on China Summary Researchers at Pwn2Own showed remote compromise of Microsoft on-premise SharePoint in March, revealing two critical vulnerabilities. Instead of staying…
Russian police bust bank-account hacking gang that used NFCGate-based malware Summary Russian police say they have dismantled a group that stole millions from bank customers using malware built on NFCGate,…
Novel clickjacking attack relies on CSS and SVG Summary Security researcher Lyra Rebane has devised and demonstrated a new clickjacking technique that uses SVG filters and CSS to read and…
Cloudflare blames Friday outage on borked fix for React2shell vuln Summary Cloudflare says a botched attempt to detect and mitigate the newly disclosed React2Shell vulnerability (CVE-2025-55182) triggered a configuration change…
React2Shell Vulnerability Under Attack from China-Nexus Groups Summary CVE-2025-55182 (nicknamed “React2Shell”) is a maximum-severity unauthenticated remote code execution (RCE) bug in React Server Components affecting several react-server-dom packages and React…
Beijing-linked hackers are hammering max-severity React bug, AWS warns Summary AWS has warned that China-linked state-nexus threat groups began actively exploiting a critical React Server Components vulnerability (CVE-2025-55182), dubbed “React2Shell”,…
