Des 2025

Threat Hunting Blog

Threat Hunting Blog

Threat Hunting Blog

Check out our latest threat hunting articles, tips and stories

Check out our latest threat hunting articles, tips and stories

Check out our latest threat hunting articles, tips and stories

React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App
Dec 10, 2025

A detailed analysis of how React2Shell (CVE-2025-55182) was used to launch a multi-stage attack against a production Next.js app, exposing Node.js systems to real-world exploitation techniques and operational C2 infrastructure.

Threat Research

Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT
Dec 3, 2025

A fake VSCode extension triggered a multi-stage attack deploying the Anivia loader and OctoRAT. Learn how the chain worked and where defenders can detect it. Learn more.

Threat Research

React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App
Dec 10, 2025

A detailed analysis of how React2Shell (CVE-2025-55182) was used to launch a multi-stage attack against a production Next.js app, exposing Node.js systems to real-world exploitation techniques and operational C2 infrastructure.

Threat Research

Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT
Dec 3, 2025

A fake VSCode extension triggered a multi-stage attack deploying the Anivia loader and OctoRAT. Learn how the chain worked and where defenders can detect it. Learn more.

Threat Research

React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App
Dec 10, 2025

A detailed analysis of how React2Shell (CVE-2025-55182) was used to launch a multi-stage attack against a production Next.js app, exposing Node.js systems to real-world exploitation techniques and operational C2 infrastructure.

Threat Research

Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT
Dec 3, 2025

A fake VSCode extension triggered a multi-stage attack deploying the Anivia loader and OctoRAT. Learn how the chain worked and where defenders can detect it. Learn more.

Threat Research

React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App
Dec 10, 2025

A detailed analysis of how React2Shell (CVE-2025-55182) was used to launch a multi-stage attack against a production Next.js app, exposing Node.js systems to real-world exploitation techniques and operational C2 infrastructure.

Threat Research

Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT
Dec 3, 2025

A fake VSCode extension triggered a multi-stage attack deploying the Anivia loader and OctoRAT. Learn how the chain worked and where defenders can detect it. Learn more.

Threat Research

Page 1 / 10

Previous
Next

Categories :

Categories :

Categories :

All
Threat Research
Product News
All
Threat Research
Product News