Information security
fromThe Hacker News
20 hours agoHackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package
CVE-2025-11953 (Metro4Shell) is actively exploited to achieve unauthenticated remote command execution and deliver persistent, Rust-based malware via a PowerShell loader.