React2Shell: Your Frontend Is Now Your Backdoor
A single unauthenticated HTTP request turns your React Server Components app into a shell. 77k vulnerable IPs, Chinese APTs, and one very embarrassed data broker.
3 transmissions tagged #aws
A single unauthenticated HTTP request turns your React Server Components app into a shell. 77k vulnerable IPs, Chinese APTs, and one very embarrassed data broker.
On Feb 28, 2017, one wrong input turned a routine operation into internet theater.
How a race condition in DynamoDB's own DNS automation cascaded into a 14-hour outage affecting half the internet.