Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 3 most recent headlines Filtered view

A pre-authentication remote code execution (RCE) chain in Oracle PeopleSoft PeopleTools abuses the Integration Broker's PSIGW gateway to execute code inside the application server's Java virtual machine (JVM), evading behavioral and network sensors.

Trend Micro Research, News and Perspectives 18 Jun 2026, 12:00 p.m. Authentication Java Oracle Remote Code Execution
Trend Micro Research, News and Perspectives 7 months, 1 week ago

CVE-2025-55182: React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation

CVE-2025-55182 is a CVSS 10.0 pre-authentication RCE affecting React Server Components. Amid the flood of fake proof-of-concept exploits, scanners, exploits, and widespread misconceptions, this technical analysis intends to cut through the noise.

Trend Micro Research, News and Perspectives 10 Dec 2025, 1:00 p.m. Actively exploited CVE-2025-55182 Authentication CVE Exploit PoC Remote Code Execution
Trend Micro Research, News and Perspectives 7 months, 1 week ago

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know

CVE-2025-55182 is a critical (CVSS 10.0) pre-authentication remote code execution vulnerability affecting React Server Components used in React.js, Next.js, and related frameworks (see the context section for a more exhaustive list of affected frameworks).

Trend Micro Research, News and Perspectives 5 Dec 2025, 1:00 p.m. Actively exploited CVE-2025-55182 Authentication CVE Framework Remote Code Execution Vulnerability