Upwind Security retweeted
🚨 CRITICAL - Unauthenticated RCE in React Server Components (GHSA-xqc2-xf4c-x3h3)
A critical vulnerability in React Server Components packages (react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel) allows unauthenticated remote attackers to execute arbitrary code via crafted RSC Flight payload responses transporting multiple typed arrays and attacker-controlled values.
👉 Affected: Versions 19.0.0–19.0.8, 19.1.0–19.1.9, 19.2.0–19.2.8, 19.3.0 | Upgrade immediately to 19.0.9, 19.1.10, 19.2.9, or 19.3.1 (or Next.js 16.4.1 / 15.5.28)
github.com/react/react/secur…
Upwind Security retweeted
Our @upwindsecurity threat research team just found a big supply chain attack in the wild. We are calling it Nodes to Snakes. Attackers exploited an NPM package (called Axios). Detailed blog below. If you need help to protect your environment, message me.
upwind.io/feed/from-nodes-to…
Upwind Security retweeted
Announcing our investment in @upwindsecurity🤝
Upwind uses eBPF for runtime-first cloud security — proving which vulnerabilities are actually exploitable in production and filtering out 95% of alert noise.
Proud to partner on their Series B.
salesforceventures.com/persp…
Upwind Security retweeted
Upwind secures $100 million series A to power next-generation cloud security in a round led by @craft_ventures @DavidSacks 🚀
For full details about the round and our plans for 2025, read the blog post by our co-Founder and CEO Amiram Shachar below.
upwind.io/feed/upwind-secure…
Upwind Security retweeted
Cheers to @AmiramShachar and the @upwindsecurity team on emerging out of stealth! SO excited to be working with you to redefine cloud security. Up & Upwind!
medium.com/p/a9ee1e793f96
