React2Shell Exploited in Large-Scale Credential Harvesting Campaign Cybersecurity April 4, 2026 A threat actor has been exploiting vulnerable Next.js applications to compromise systems and exfiltrate credentials at scale, Cisco’s Talos security…