Researchers track dozens of organizations affected by React2Shell compromises tied to China’s MSS | The Record from Recorded Future News

Researchers have identified over 30 organizations affected by the React2Shell vulnerability (CVE-2025-55182), which is being exploited by an initial access broker linked to China’s Ministry of State Security (MSS). The attacks involve stealing credentials and installing malware, with widespread scanning for the critical vulnerability observed globally.