How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
Aqua Nautilus reported detecting a multistage, fileless XMRig cryptojacking campaign targeting containerized Node.js applications built with Next.js. Aqua’s telemetry showed in-me…
Aquasec
2 articles
Critical CVE in React Server Components Actively Exploited
Aqua Nautilus reports active exploitation of CVE-2025-55182 (React2Shell), an unauthenticated insecure-deserialization vulnerability in React Server Components that can enable rem…