React2Shell Exploit Leads to Major Breaches and Losses

A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability (CVE-2025-55182) to breach 766 Next.js hosts, resulting in significant credential theft. Concurrently, the Drift Protocol has suffered a $280 million loss after attackers seized its Security Council powers. These incidents highlight the critical need for immediate patching of vulnerable systems and heightened monitoring of financial protocols to prevent unauthorized access and financial losses.