Credential-Theft

React2Shell exploit hits 766 Next.js servers in 24 hours — mass credential theft campaign confirmed (CVE-2025-55182)

React2Shell exploit hits 766 Next.js servers in 24 hours — mass credential theft campaign confirmed (CVE-2025-55182)

Apr 7, 2026 · 3 min read

BlueHammer: leaked Windows zero-day gives attackers SYSTEM privileges — no patch yet

BlueHammer: leaked Windows zero-day gives attackers SYSTEM privileges — no patch yet

Apr 6, 2026 · 3 min read

CERT-EU confirms European Commission cloud breach linked to Trivy supply-chain compromise

CERT-EU confirms European Commission cloud breach linked to Trivy supply-chain compromise

Apr 3, 2026 · 1 min read

TrueConf CVE-2026-3502 zero-day abused to push malicious updates from trusted servers

TrueConf CVE-2026-3502 zero-day abused to push malicious updates from trusted servers

Apr 1, 2026 · 1 min read

CISA adds Trivy CVE-2026-33634 to KEV after supply-chain compromise

CISA adds Trivy CVE-2026-33634 to KEV after supply-chain compromise

Mar 26, 2026 · 1 min read