
Cybersecurity Wrapped 2025
Your Cybersecurity Wrapped 2025 is here. From the $1.5B crypto heist to the rise of AI malware and the 'React2Shell' crisis, we recap the year's wildest hacks, trends, and the Top 10 CVEs.
Topic
Every article tagged React2Shell, newest first.
Related topics

Your Cybersecurity Wrapped 2025 is here. From the $1.5B crypto heist to the rise of AI malware and the 'React2Shell' crisis, we recap the year's wildest hacks, trends, and the Top 10 CVEs.

The React2Shell saga continues with CVE-2025-55184. A new critical DDoS vulnerability in React Server Components allows unauthenticated attackers to crash servers via infinite loops. Update immediately.

React2Shell (CVE-2025-55182) exposes React Server Components to a critical Remote Code Execution flaw. Dive into the technical details, the exploitation mechanics, and the urgent remediation steps required to secure your infrastructure.
Keep reading

Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.

Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.