credential harvesting
Cybersecurity & Risk
React2Shell at Scale: 766 Next.js Servers Breached in Credential Harvest
April 13, 2026
Cisco Talos exposes UAT-10608's mass exploitation of CVE-2025-55182, harvesting AWS keys, Stripe secrets, and AI tokens from 766 hosts using NEXUS Listener.
