Shift in Cloud Attack Vectors: Vulnerability Exploitation Outpaces Credentials (infosecurity-magazine.com)

• Attackers now prefer software exploits over password and credential theft.
• React2Shell is identified as a critical vector for unauthorized cloud access.
• Strategic shift indicates higher sophistication in automated threat delivery.

"A strategic pivot in cloud-based cyberattacks has been identified, where threat actors are increasingly prioritizing the exploitation of software vulnerabilities over traditional credential theft. Highlighting flaws such as 'React2Shell,' the report suggests that attackers are moving toward more architectural and automated intrusion methods. This trend necessitates a heightened focus on software supply chain security and rapid vulnerability remediation to maintain infrastructure resilience."