Remote attack – Securitydive

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability

admin3 weeks ago03 mins

The cybersecurity industry is on high alert following the disclosure of a critical React vulnerability that can be exploited by a remote, unauthenticated attacker for remote code execution. React (React.js) is an open source JavaScript library designed for creating application user interfaces. Maintained by Meta and a large community of companies and individual developers from…

U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls

admin1 year ago1 year ago06 mins

The U.S. government on Tuesday unsealed charges against a Chinese national for allegedly breaking into thousands of Sophos firewall devices globally in 2020. Guan Tianfeng (aka gbigmao and gxiaomao), who is said to have worked at Sichuan Silence Information Technology Company, Limited, has been charged with conspiracy to commit computer fraud and conspiracy to commit…