VulnCheck Government IT News

Critical SmarterMail Vulnerability Exploited in Ransomware Attacks

A critical SmarterMail vulnerability (CVE‑2026‑24423) is being actively exploited by ransomware groups, allowing attackers to execute commands remotely without ...

Hackers Actively Exploit React Native Metro Server to Target Software Developers

Hackers are actively exploiting Metro4Shell (CVE‑2025‑11953), a critical remote code execution flaw in React Native’s Metro development server, to compromise software ...

React2Shell exploitation undergoes significant change in threat activity

Researchers are observing a major shift in React2Shell (CVE‑2025‑55182) exploitation, as recent attacks have consolidated to two primary IP addresses responsible for over ...

Attacks involving critical React Native bug target Windows, Linux systems

Threat actors have been exploiting the critical React Native Community CLI vulnerability (CVE‑2025‑11953)—also known as Metro4Shell—to compromise both Windows ...

Risky Bulletin: Plone CMS stops supply-chain attack

Plone CMS successfully thwarted a supply‑chain attack after detecting malicious code that an attacker had secretly inserted into five project repositories using a compromised ...

React Native ‘Metro4Shell’ Exploited in the Wild, Putting Exposed Development Servers at Risk

Threat actors are actively exploiting Metro4Shell (CVE‑2025‑11953), a critical remote code execution (RCE) vulnerability in React Native’s Metro development server, ...

React Native ‘Metro4Shell’ Exploited in the Wild, Putting Exposed Development Servers at Risk

Threat actors are actively exploiting Metro4Shell (CVE‑2025‑11953), a critical remote code execution (RCE) vulnerability in React Native’s Metro development server, ...

React Native ‘Metro4Shell’ Exploited in the Wild, Putting Exposed Development Servers at Risk

Threat actors are actively exploiting Metro4Shell (CVE‑2025‑11953), a critical remote code execution (RCE) vulnerability in React Native’s Metro development server, ...

React Native ‘Metro4Shell’ Exploited in the Wild, Putting Exposed Development Servers at Risk

Threat actors are actively exploiting Metro4Shell (CVE‑2025‑11953), a critical remote code execution (RCE) vulnerability in React Native’s Metro development server, ...

React Native ‘Metro4Shell’ Exploited in the Wild, Putting Exposed Development Servers at Risk

Threat actors are actively exploiting Metro4Shell (CVE‑2025‑11953), a critical remote code execution (RCE) vulnerability in React Native’s Metro development server, ...

Malware & ThreatsCritical React Native Vulnerability Exploited in the Wild

Threat actors are actively exploiting CVE‑2025‑11953, a critical React Native Community CLI vulnerability known as Metro4Shell, to deliver malware across Windows and Linux ...

Hackers exploit critical React Native Metro bug to breach dev systems

Hackers are exploiting CVE‑2025‑11953 (“Metro4Shell”), a critical remote code execution flaw in the React Native Metro development server, to breach developer ...

Risky Bulletin: Improperly patched bug exploited again in Fortinet firewalls

Threat actors are exploiting CVE‑2025‑59718—a Fortinet FortiGate SSO authentication bypass bug that was improperly patched in December—to breach firewalls again. ...

Breach Roundup: DOGE Uploaded Social Security Data to Cloud

A breach roundup from BankInfoSecurity reveals that employees of the U.S. Department of Government Efficiency (DOGE) improperly copied Social Security Administration data onto ...

Zero-Day Exploits Surge, Nearly 30% of Flaws Attacked Before Disclosure

A new VulnCheck report reveals that zero‑day and one‑day exploitation surged in 2025, with 28.96% of known exploited vulnerabilities (KEVs) attacked before or on the day of ...

VulnCheck Launches Canary Intelligence to Provide Verified Evidence of Active Exploitation

VulnCheck, the exploit intelligence company, today announced the launch of Canary Intelligence, a new product that provides first-party, validated exploitation data from ...

VulnCheck Achieves Record-Setting ARR Growth with Unprecedented Demand for Its Transformative Approach to Exploit Intelligence

VulnCheck, the exploit intelligence company, today announced record-setting growth, fueled by the accelerated adoption of its real-time exploit and vulnerability intelligence ...