North Korean hackers exploit React2Shell flaw in EtherRAT malware attacks

A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence ...

Open-source toolkit: AI company Anthropic acquires Bun

AI company Anthropic has acquired the open-source JavaScript toolkit Bun, which it uses for the infrastructure of Claude Code ...

Why Anthropic Bought Bun, a High-Speed Runtime to Power Claude Tools and Dev Agents

Anthropic’s purchase of Bun focuses on fast runtimes with single-binary deploys and Node.js compatibility, helping teams run ...
InfoWorld

All I want for Christmas is a server-side JavaScript framework

Could 2026 be the year of the beautiful back end? We explore the range of options for server-side JavaScript development, ...
The Hacker News

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

North Korea-linked attackers exploit CVE-2025-55182 to deploy EtherRAT, a smart-contract-based RAT with multi-stage ...

AnthropicがJavaScriptランタイム「Bun」を買収、Claude Codeはわずか6カ月で約1500億円の収益を上げる

2025年12月2日、開発者のジャレド・サムナー氏は自身のブログにて、同氏が開発したJavaScriptランタイムの「Bun」がAnthropicに買収されたことを発表しました。これに続き、Anthropicも翌12月3日に公式声明を出し、同社のAIコーディングツールである「Claude Code」が一般公開からわずか6カ月で年換算の収益が10億ドル(約1500億円)という大きな節目に達したことと ...
SecurityWeek

React2Shell Attacks Linked to North Korean Hackers

Attacks exploiting the recently emerged React vulnerability dubbed React2Shell appear to have been conducted by North Korean ...
Infosecurity Magazine

React2Shell Exploit Campaigns Tied to North Korean Cyber Intrusion Tactics

Sysdig has found sophisticated malicious campaigns exploiting React2Shell that delivered EtherRAT and suggested North Korean ...

Anthropic makes first acquisition with purchase of Bun to accelerate Claude Code

Artificial intelligence company Anthropic PBC today announced it had made its first acquisition in acquiring developer tools startup Bun for an undisclosed price.

Windows 11 has a worrying problem that could get expensive – and as a Discord fan I'm all ...

Amid a RAM crisis, Discord and a few other applications using Chromium and the Electron framework are causing RAM spikes for ...
DataBreachToday

Breach Roundup: Recently Patched Oracle Flaw Under Attack

This week, a recently fixed Oracle flaw is being actively exploited, Shelly tackled Pro 4PM DoS bug, "Shai-Hulud 2.0" hit npm ...

「React」「Next.js」に重大なリモートコード実行の脆弱性、CVSSの基本 ...

UIライブラリ「React」（React.js）および「Next.js」で、認証なしにリモートコード実行が可能になる重大なセキュリティ脆弱性「CVE-2025-55182」が存在することが明らかになった。この脆弱性は「React2Shell」とも呼ば ...