Hackers Used a React Frontend Vulnerability to Break Into LexisNexis AWS Infrastructure. 400K Users Exposed Including Federal Judges.
The LexisNexis data breach exploited a React2Shell vulnerability to pivot into AWS infrastructure, exposing 53 plaintext AWS Secrets Manager credentials and 400K user profiles including federal judges and DOJ staff. Here is how the attack worked.
·6 min read