"Fake Proof" and AI Slop Hobble Defenders

The report covers the critical React2Shell vulnerability (CVSS 10.0) that has seen a surge of exploitation attempts and dozens of public PoCs; many published PoCs are AI-generated or nonfunctional, which pollutes detection and triage, leads to false negatives, and delays patching. It notes active attacks (including China-linked groups) and emphasizes that the true risk arises from the gap between detection and rapid remediation rather than PoC quality alone.