CrowdStrike’s investigation shows that WARP PANDA initially infiltrated some victim networks as early as late 2023, later ...

React2Shell (CVE-2025-55182) is under active exploitation by Earth Lamia and Jackpot Panda, risking over two million ...

CrowdStrike warned that Warp Panda, a China-linked cyber-espionage group, is targeting US organizations to steal sensitive data and support Beijing’s strategic interests ...

The China-based cyber-threat group has been using malicious extensions on the Google Chrome and Microsoft Edge marketplaces ...

AWS reports China-linked groups Earth Lamia and Jackpot Panda rapidly attacking the critical React2Shell CVE-2025-55182 RCE ...

RCE flaw in React and Next.js is being actively exploited by China-nexus threat groups, prompting urgent patching and global mitigations.

Exploitation of React2Shell started almost immediately after disclosure. AWS reported that at least two known China-linked ...

In a separate report published Thursday, CrowdStrike attributed the backdoor to a new China-nexus gang it calls Warp Panda, ...

CISA details China-linked BRICKSTORM malware that enables persistent, stealthy access in VMware and Windows systems.

Just as the experts predicted, cybercriminals are now actively exploiting the critical severity vulnerability in React Server ...

Exploitation of an RCE flaw in a widely-used open source library is spreading quickly, with China-backed threat actors in the ...