Over 59,000 Next.js servers hacked in 48 hours in credential-theft campaign

A fast-moving cyberattack has compromised more than 59,000 internet-facing Next.js servers in less than two days after attackers exploited unpatched flaws that allow remote code execution, according to new security research. While there is a patch for it, thousands of systems are still exposed. Security researchers have dubbed the operation PCPcat, describing it as one […]