Search

OCGOT(オシゴット)
OCGOT(オシゴット) @OCGOT1616 ·
WAF導入＝安心は崩壊寸前。React2Shell攻撃はWAFの盲点を突き、AIエージェントが攻撃パターンを自律変化。WAF新要件を急務に。防御は「進化」する時代。#セキュリティ #WAF #React2Shell ift.tt/DAfx173
React2Shell騒動の裏で繰り広げられた攻防　WAF回避とAI利用攻撃が突きつける「WAFの新要件」

「WAFを導入しているから安心」という常識が今、音を立てて崩れている。2025年末に発生した「React2Shell」攻撃は、WAFの仕様上の死角を突く巧妙な回避手法を顕在化させた。生成AIを駆使し、自律的に攻撃パターンを変化させるAIエージェントの脅威も現実のものとなりつつある。高度化する「WAF回避」の猛攻を前に、WAFの新要件を解き明かす。

From atmarkit.itmedia.co.jp
30
Ghacks Tech News
Ghacks Tech News @ghacks ·
According to Google’s latest threat report, #vulnerability exploitation was the main initial access method in 44.5% of cloud intrusions investigated in the second half of 2025. ghacks.net/2026/03/10/goo… #React2Shell #XWiki #RCE
Google: Cloud Attacks Now Exploit Software Flaws More Often Than Credentials - gHacks Tech News

Google's latest cloud threat report shows bug exploitation has overtaken credential theft as the primary entry point for attackers.

From ghacks.net
139
Gray Hats
Gray Hats @the_yellow_fall ·
Ctrl-Alt-Intel exposes a suspected DPRK campaign using an 'Amazon Kill Chain' and React2Shell to systematically breach crypto exchanges and steal code. #AWSKillChain #React2Shell #CyberSecurity #Crypto #DPRKHackers #CloudSecurity #InfoSec #Kubernetes securityonline.info/suspected-nort…
Suspected North Korean Actors Target the Cryptocurrency Supply Chain

Ctrl-Alt-Intel exposes a suspected DPRK campaign using an 'Amazon Kill Chain' and React2Shell to systematically breach crypto exchanges and steal code.

From securityonline.info
1
4
1.2K
Spycio Kon
Spycio Kon @KonSpycio ·
I found some websites still hav react2shell vul, but the waf beside blocked "resolved_model" word. Any tips or idea to bypass this?? Tried unicode but didnt work #react2shell
28
WhoisXML API
WhoisXML API @whoisxmlapi ·
#React2Shell isn’t just a headline, it’s a live access path attackers are folding into real campaigns. Our team at WhoisXML API continues to see activity targeting exposed React Server Components and related infrastructure. Appreciate how @ravielakshmanan at @TheHackersNews breaks down where exploitation stands now and why closing React2Shell gaps is still a priority for defenders. 👉 React2Shell coverage on The Hacker News: thehackernews.com/2025/12/react2…0 #ILOVEPOOP #threatintelligence #CyberSecurity #CVE
React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

React2Shell vulnerability CVE-2025-55182 is actively exploited to deploy Linux malware, run commands, and steal cloud credentials at scale.

From thehackernews.com
34