RondoDox botnet exploits React2Shell flaw to breach Next.js servers

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...
Fireship on MSN

React developers are in a civil war and Next.js is watching

React used to be simple, fun, and mostly predictable. Somewhere along the way, it grew server components, suspense, and a ...