Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

3 hours ago [email protected] (The Hacker News)

A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials, SSH private keys, Amazon Web Services (AWS) secrets, shell command history, Stripe API keys, and GitHub tokens at scale.
Cisco Talos has attributed the operation to a threat cluster it tracks as

The post “Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)