State of Cybercrime

The React2Shell Crisis

State of Cybercrime

Show Notes

React2Shell, the zero-click RCE exploit, is rapidly becoming one of the most significant cybersecurity incidents this year.

From emergency patches causing a massive Cloudflare outage to active exploitation by China and North Korea-linked groups, this flaw may be the next Log4Shell moment for enterprises and developers alike.

Join Matt and David for an episode of State of Cybercrime that breaks down how attackers are weaponizing this vulnerability and what organizations must do to stay safe. They will also dive into the Shai-hulud 2.0 assault on cloud infrastructure as well as the biggest DDoS attack ever recorded.

More from Varonis ⬇️ Visit our website: https://www.varonis.com LinkedIn: linkedin.com/company/varonis X/Twitter: x.com/varonis Instagram: instagram.com/varonislife Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

More from Varonis ⬇️

Visit our website: https://www.varonis.com

LinkedIn: https://www.linkedin.com/company/varonis

X/Twitter: https://twitter.com/varonis

Instagram: https://www.instagram.com/varonislife/

More from State of Cybercrime

Sep 28, 2026

ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members.

Sep 12, 2026

If your company runs PTC Windchill, Cl0p may already have your blueprints.

Aug 15, 2026

Out of the sandbox and into the fire.

Jul 18, 2026

A complete attack chain run by an AI agent – with zero human hands on the keyboard.

Jun 12, 2026

The supply chain remains the weakest link. A new automated malware campaign dubbed “Megalodon” poisoned more than 5,500 GitHub repos in just six hours, quietly harvesting cloud credentials, tokens, and sensitive code from environments that implicitly trust what they pull.

See all episodes →