Weekly cybersecurity bulletin highlights hybrid botnet activity, long standing Apache vulnerability chains, AI enabled attacks, major data breaches, and escalating cybercrime losses across global sectors and platforms.
Researchers uncover SSHStalker botnet leveraging IRC based command and control and legacy Linux kernel exploits to compromise systems and maintain persistent access across outdated infrastructure.
Black Lotus Labs null-routed over 550 command-and-control nodes linked to AISURU/Kimwolf botnet, which compromises millions of Android devices and routers to provide residential proxy services for cybercriminals.
GoBruteforcer malware campaigns are actively brute-forcing credentials on FTP, MySQL, PostgreSQL, and phpMyAdmin services, exploiting weak defaults and targeting blockchain projects and misconfigured LLM endpoints.
Cybersecurity researchers report a nine-month-long RondoDox botnet campaign exploiting React2Shell vulnerability in Next.js and IoT devices, with thousands of systems at risk globally.
