3 casos · pág. 1/1
Researchers at Hacktron (author ginoah) described five bypasses of the Vercel WAF rules protecting against React2Shell (CVE-2025-55182), a pre-auth RCE in React Server Functions affecting Next.js 15.x–16.0.6 and other React-based frameworks. The bypasses were found during a Vercel bounty challenge. Per Vercel's writeup, 116 researchers to…
A Hacktron researcher argues that AI-assisted vulnerability research is rapidly widening the enterprise attack surface. He cites recent breaches at Vercel and GitHub and a wave of critical CVEs in F5, Fortinet, Cisco, Palo Alto and ImageMagick. According to the author, the Vercel compromise began with a breach of the AI platform Context.a…
The Department of Homeland Security (DHS), under Secretary Markwayne Mullin, has issued an order under the Federal Acquisition Supply Chain Security Act of 2018 (FASCSA). It directs federal civilian agencies to stop buying and to remove products and services from Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and its affiliates. It a…
