Cybercriminals say they stole sensitive records by exploiting an unpatched vulnerability known as React2Shell and using the ...