Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability
Two China-linked groups, Earth Lamia and Jackpot Panda, were observed weaponizing CVE-2025-55182 (CVSS 10.0), a React Server Components flaw allowing unauthenticated remote code execution, within hours of public disclosure; it is fixed in React 19.0.1,...