top of page
Table of Content
React2Shell Critical Vulnerability (CVE-2025-55182)
React2Shell (CVE-2025-55182) is a critical CVSS 10.0 remote code execution vulnerability in React Server Components and Next.js. Learn how the React2Shell exploit works, which versions are affected, how Chinese threat actors are abusing it in the wild, and get practical detection, mitigation, and incident-response guidance for your React and Next.js applications.
Akshay Jain
4 min read
RedTiger Infostealer: How a Red Team Tool Became a Gamer Targeting Malware
RedTiger an open source red team toolkit has been repurposed into an infostealer that targets Discord, browsers and crypto wallets. Read the technical analysis, IoCs, detection rules and mitigation guidance.
Akshay Jain
3 min read
SonicWall Backup Breach
SonicWall confirmed an unauthorized access to MySonicWall cloud backups affecting all customers. Learn the technical details, risks, detection rules, IR workflow, and remediation checklist for the sonicwall breach.
Akshay Jain
3 min read
EDR Freeze: In Depth Analysis of the Technique That Silences Endpoint
Learn how the EDR Freeze uses Windows Error Reporting to suspend EDR/AV processes, how to detect it, and what to do if you see it.
Akshay Jain
2 min read
EchoLeak (CVE-2025-32711): Deep Dive into the Zero-Click Copilot Prompt-Injection Vulnerability
CVE-2025-32711 (“EchoLeak”) is a critical zero click prompt injection in Microsoft 365 Copilot that could exfiltrate org secrets. Read the technical breakdown, detection rules, IR playbook and mitigation guidance.
Akshay Jain
3 min read
bottom of page