Connect with us

Tech

Cyber teams on alert as React2Shell exploitation spreads | Computer Weekly

Published

on

Cyber teams on alert as React2Shell exploitation spreads | Computer Weekly


A remote code execution (RCE) vulnerability in the React JavaScript library, which earlier today caused disruption across the internet as Cloudflare pushed mitigations live on its network, is now being exploited by multiple threat actors at scale, according to reports.

Maintained by Meta, React is an open source resource designed to enable developers to build user interfaces (UIs) for both native and web applications.

The vulnerability in question, assigned CVE-2025-55182 and dubbed React2Shell by the cyber community, is a critically-scored pre-authentication RCE flaw in versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 of React Server Components that exploits a flaw in how they decode payloads sent to React Function Endpoints.

This means that by crafting a malicious HTTP request to a Server Function endpoint, this means a threat actor could gain the ability to run arbitrary code on the target server.

It was added to the US’ Cybersecurity and Infrastructure Security Agency’s (CISA’s) catalogue on Friday 5 December, and according to Amazon Web Services (AWS) CISO and vice president of security engineering, C.J. Moses, the chief culprits behind the rapid exploitation are thought to be China-nexus threat actors.

Moses cautioned that China’s habit of running shared, large-scale anonymisation infrastructure for multiple state-backed threat actors made definitive attribution challenging, however, following disclosure on Wednesday 3 December, groups tracked as Earth Lamia and Jackpot Panda were observed taking advantage of React2Shell.

“China continues to be the most prolific source of state-sponsored cyber threat activity, with threat actors routinely operationalising public exploits within hours or days of disclosure,” he wrote.

“Through monitoring in our AWS MadPot honeypot infrastructure, Amazon threat intelligence teams have identified both known groups and previously untracked threat clusters attempting to exploit CVE-2025-55182.”

Earth Lamia is well-known for exploiting web application vulnerabilities against organisations primarily located in Latin America, the Middle East, and Southeast Asia, with a particular focus on educational institutions, financial services organisations, government bodies, IT companies, logistics firms, and retailers.

Jackpot Panda, according to AWS, targets its activity at entities in East and Southeast Asia, with its operations aligning to China’s goals relating to corruption and domestic security.

Massive attack

With reports suggesting that there may be over 950,000 servers running vulnerable frameworks such as React and Next.js, Radware threat researchers warned of a massive potential attack surface.

React and Next.js are both well-used thanks to their efficiency and flexibility, while robust ecosystems make them a default choice for many developers – and as such they are found under the bonnet everywhere, from mobile apps and consumer-facing websites to enterprise-grade platforms, said Radware.

“This widespread reliance means a single critical flaw can have cascading consequences for a significant portion of modern web infrastructure,” the Radware team said. “A substantial number of applications across public and private clouds are immediately exploitable, necessitating urgent and widespread action.”

Michael Bell, founder and CEO of Suzu Labs, a penetration testing and AI security specialist, said that hours from disclosure to active exploitation by nation-state actors was the new normal, and matters would likely get worse.

“China-nexus groups have industrializsd their vulnerability response: they monitor disclosures, grab public PoCs – even broken ones – and spray them at scale before most organisations have finished reading the advisory,” he said.

“AWS’s report showing attackers debugging exploits in real-time against honeypots demonstrates this isn’t automated scanning; it’s hands-on-keyboard operators racing to establish persistence before patches roll out.

“With AI tools increasingly capable of parsing vulnerability disclosures and generating exploit code, expect the window between disclosure and weaponization to shrink from hours to minutes,” said Bell.

He added that the earlier Cloudflare outage in service of an emergency patch “tells you everything about the severity calculus here”.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Yann LeCun Raises $1 Billion to Build AI That Understands the Physical World

Published

on

Yann LeCun Raises  Billion to Build AI That Understands the Physical World


Advanced Machine Intelligence (AMI), a new Paris-based startup cofounded by Meta’s former chief AI scientist Yann LeCun, announced Monday it has raised more than $1 billion to develop AI world models.

LeCun argues that most human reasoning is grounded in the physical world, not language, and that AI world models are necessary to develop true human-level intelligence. “The idea that you’re going to extend the capabilities of LLMs [large language models] to the point that they’re going to have human-level intelligence is complete nonsense,” he said in an interview with WIRED.

The financing, which values the startup at $3.5 billion, was co-led by investors such as Cathay Innovation, Greycroft, Hiro Capital, HV Capital, and Bezos Expeditions. Other notable backers include Mark Cuban, former Google CEO Eric Schmidt, and French billionaire and telecommunications executive Xavier Niel.

AMI (pronounced like the French word for friend) aims to build “a new breed of AI systems that understand the world, have persistent memory, can reason and plan, and are controllable and safe,” the company says in a press release. The startup says it will be global from day one, with offices in Paris, Montreal, Singapore, and New York, where LeCun will continue working as a New York University professor in addition to leading the startup. AMI will be the first commercial endeavor for LeCun since his departure from Meta in November 2025.

LeCun’s startup represents a bet against many of the world’s biggest AI labs like OpenAI, Anthropic, and even his former workplace, Meta, which believe that scaling up LLMs will eventually deliver AI systems with human-level intelligence or even superintelligence. LLMs have powered viral products such as ChatGPT and Claude Code, but LeCun has been one of the AI industry’s most prominent researchers speaking out about the limitations of these AI models. LeCun is well known for being outspoken, but as a pioneer of modern AI that won a Turing award back in 2018, his skepticism carries weight.

LeCun says AMI aims to work with companies in manufacturing, biomedical, robotics, and other industries that have lots of data. For example, he says AMI could build a realistic world model of an aircraft engine and work with the manufacturer to help them optimize for efficiency, minimize emissions, or ensure reliability.

AMI was cofounded by LeCun and several leaders he worked with at Meta, including the company’s former director of research science, Michael Rabbat; former vice president of Europe, Laurent Solly; and former senior director of AI research, Pascale Fung. Other cofounders include Alexandre LeBrun, former CEO of the AI health care startup Nabla, who will serve as AMI’s CEO, and Saining Xie, a former Google DeepMind researcher who will be the startup’s chief science officer.

The Case for World Models

LeCun does not dismiss the overall utility of LLMs. Rather, in his view, these AI models are simply the tech industry’s latest promising trend, and their success has created a “kind of delusion” among the people who build them. “It’s true that [LLMs] are becoming really good at generating code, and it’s true that they are probably going to become even more useful in a wide area of applications where code generation can help,” says LeCun. “That’s a lot of applications, but it’s not going to lead to human-level intelligence at all.”

LeCun has been working on world models for years inside of Meta, where he founded the company’s Fundamental AI Research lab, FAIR. But he’s now convinced his research is best done outside the social media giant. He says it’s become clear to him that the strongest applications of world models will be selling them to other enterprises, which doesn’t fit neatly into Meta’s core consumer business.

As AI world models like Meta’s Joint-Embedding Predictive Architecture (JEPA) became more sophisticated, “there was a reorientation of Meta’s strategy where it had to basically catch up with the industry on LLMs and kind of do the same thing that other LLM companies are doing, which is not my interest,” says LeCun. “So sometime in November, I went to see Mark Zuckerberg and told him. He’s always been very supportive of [world model research], but I told him I can do this faster, cheaper, and better outside of Meta. I can share the cost of development with other companies … His answer was, OK, we can work together.”



Source link

Continue Reading

Tech

Nvidia Is Planning to Launch an Open-Source AI Agent Platform

Published

on

Nvidia Is Planning to Launch an Open-Source AI Agent Platform


Nvidia is planning to launch an open-source platform for AI agents, people familiar with the company’s plans tell WIRED.

The chipmaker has been pitching the product, referred to as NemoClaw, to enterprise software companies. The platform will allow these companies to dispatch AI agents to perform tasks for their own workforces. Companies will be able to access the platform regardless of whether their products run on Nvidia’s chips, sources say.

The move comes as Nvidia prepares for its annual developer conference in San Jose next week. Ahead of the conference, Nvidia has reached out to companies including Salesforce, Cisco, Google, Adobe, and CrowdStrike to forge partnerships for the agent platform. It’s unclear whether these conversations have resulted in official partnerships. Since the platform is open source, it’s likely that partners would get free, early access in exchange for contributing to the project, sources say. Nvidia plans to offer security and privacy tools as part of this new open-source agent platform.

Nvidia did not respond to a request for comment. Representatives from Cisco, Google, Adobe, and CrowdStrike also did not respond to requests for comment. Salesforce did not provide a statement prior to publication.

Nvidia’s interest in agents comes as people are embracing “claws,” or open-source AI tools that run locally on a user’s machine and perform sequential tasks. Claws are often described as self-learning, in that they’re supposed to automatically improve over time. Earlier this year, an AI agent known as OpenClaw—which was first called Clawdbot, then Moltbot—captivated Silicon Valley due to its ability to run autonomously on personal computers and complete work tasks for users. OpenAI ended up acquiring the project and hiring the creator behind it.

OpenAI and Anthropic have made significant improvements in model reliability in recent years, but their chatbots still require hand-holding. Purpose-built AI agents or claws, on the other hand, are designed to execute multiple steps without as much human supervision.

The usage of claws within enterprise environments is controversial. WIRED previously reported that some tech companies, including Meta, have asked employees to refrain from using OpenClaw on their work computers, due to the unpredictability of the agents and potential security risks. Last month a Meta employee who oversees safety and alignment for the company’s AI lab publicly shared a story about an AI agent going rogue on her machine and mass deleting her emails.

For Nvidia, NemoClaw appears to be part of an effort to court enterprise software companies by offering additional layers of security for AI agents. It’s also another step in the company’s embrace of open-source AI models, part of a broader strategy to maintain its dominance in AI infrastructure at a time when leading AI labs are building their own custom chips. Nvidia’s software strategy until now has been heavily reliant on its CUDA platform, a famously proprietary system that locks developers into building software for Nvidia’s GPUs and has created a crucial “moat” for the company.

Last month The Wall Street Journal reported that Nvidia also plans to reveal a new chip system for inference computing at its developer conference. The system will incorporate a chip designed by the startup Groq, which Nvidia entered into a multibillion-dollar licensing agreement with late last year.

Paresh Dave and Maxwell Zeff contributed to this report.



Source link

Continue Reading

Tech

Anthropic Claims Pentagon Feud Could Cost It Billions

Published

on

Anthropic Claims Pentagon Feud Could Cost It Billions


Anthropic executives allege that current customers and prospective ones have been demanding new terms and even backing out of negotiations since the US Department of Defense labeled the AI startup a supply-chain risk late last month, according to court papers that also revealed new financial details about the company.

Hundreds of millions of dollars in expected revenue this year from work tied to the Pentagon is already at risk for Anthropic, the company’s chief financial officer, Krishna Rao, wrote in a court filing on Monday. But if the government has its way and pressures a broad range of companies from doing business with the AI startup, regardless of any ties to the military, Anthropic could ultimately lose billions of dollars in sales, he stated. Its all-time sales, since commercializing its technology in 2023, exceed $5 billion, according to Rao.

Anthropic’s revenue exploded as its Claude models began outperforming rivals and showing advanced capabilities in areas such as generating software code. But the company spends heavily on computing infrastructure and remains deeply unprofitable. Rao specified that Anthropic has spent over $10 billion to train and deploy its models.

Anthropic chief commercial officer Paul Smith provided several examples of partners who have privately raised concerns to the AI startup in recent days. He said a financial services customer paused negotiations over a $15 million deal because of the supply-chain label, and two leading financial services companies have refused to close deals valued together at $80 million unless they gain the right to unilaterally cancel their contracts for any reason. A grocery store chain canceled a sales meeting, citing the supply-chain-risk designation, Smith added.

“All have taken steps that reflect deep distrust and a growing fear of associating with Anthropic,” Smith wrote.

The executives’ comments are part of statements from six Anthropic leaders in support of a preliminary order that would allow the San Francisco company to continue doing business with the Department of Defense until lawsuits about the supply-chain-risk issue are resolved.

Anthropic has sued the Trump administration in two courts. A lawsuit filed in San Francisco federal court on Monday alleges the government violated the company’s free speech rights. A separate case filed Monday in the federal appeals court in Washington, DC, accuses the Defense Department of unfairly discriminating and retaliating against Anthropic.

The company is seeking a hearing as soon as Friday in San Francisco for a temporary reprieve. The legal battle and sales fallout follows a weeks-long dispute between Anthropic and the Pentagon over the potential use of AI technologies for mass domestic surveillance and autonomous lethal weapons. Anthropic contends AI is not yet capable of safely undertaking the tasks, while the Pentagon wants the right to make that judgment on its own.

By law, the supply-chain designation prevents a narrow set of companies that do business with the Pentagon from incorporating Anthropic into their systems. But Defense secretary Pete Hegseth has cast a wider net. He posted on X late last month that “effective immediately, no contractor, supplier, or partner that does business with the United States military may conduct any commercial activity with Anthropic.”

Rao wrote that the Pentagon reinforced the message by reaching out to several startups about their use of Claude, which he said he learned had happened from speaking with an investor that Anthropic and the smaller companies all share. They “have grown worried and uncertain about their ability to use Claude,” Rao wrote.

The Pentagon declined to comment on the lawsuits and did not immediately respond to a request for comment about Rao’s allegation about the outreach.



Source link

Continue Reading

Trending