/
ttps_attack:T1041 × criticity:critical × has_exploit:true × limpar

Resultados

2 casos · pág. 1/1

f5.com · exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

CVE-2025-55182 CVE-2017-9841 CVE-2023-1389 RondoDox
thehackernews.com · exploit público critical

Russian-Speaking INC and The Gentlemen Ransomware Affiliates Use Phantom AI Agent Framework to Breach 62 Organizations

SOCRadar researchers analyzed an exposed directory at 45.227.254.43 that revealed an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. It is centered on an "Autonomous Red Team Kill Chain Framework" called Phantom. The actor is assessed to be Russian-speaking and acts both as an intrusion and …

CVE-2024-57727 CVE-2026-35616 CVE-2026-41940 INC The Gentlemen industrial manufacturing