Last seen February 10, 2026

AI Security Incident

Evidence indicates that the affected technology is affected by a security issue.

Technical Severity
Low severity
Lifecycle Status

STABLE

What Happened

Evidence indicates that the affected technology is affected by a security issue.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Recommended Response
First Seen

Feb 10, 2026 05:30

Last Seen

Feb 10, 2026 05:30

Exploitation status: UNKNOWN

Primary entities:

Remote Code Execution

Timeline

  • Incident first seen
    Feb 10, 2026 05:30

    BugSkan first recorded this incident.

  • AI/LLM-Generated Malware Used to Exploit React2Shell - Darktrace
    Feb 10, 2026 05:30

    darktrace.com · Malware

Sources

AI/LLM-Generated Malware Used to Exploit React2Shell - Darktrace

darktrace.com · Feb 10, 2026 05:30

An AI-generated malware sample exploited CVE-2025-55182, known as React2Shell, within a Docker honeypot with an exposed daemon. This resulted in remote code execution, allowing the deployment of an XMRig cryptominer on over ninety compromised hosts and demonstrating the operational value of LLMs for low-skill adversaries.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.

← Back to incident intelligence