RONDODOX BOTNET EXPLOITS CRITICAL REACT2SHELL FLAW TO HIJACK IOT DEVICES AND WEB SERVERS

Summary from the TLDR InfoSec newsletter

Cybersecurity researchers have revealed a nine-month campaign that exploited CVE-2025-55182 in React2Shell to hijack IoT devices and web servers, incorporating them into the RondoDox botnet.