Carbonato Malware Exploits Docker Hosts To Operate Hermes AI Agent Framework
Security researchers reveal Carbonato botnet attacks exposed Docker daemons to deploy Hermes AI Agent, enabling Telegram controlled operations and credential collection.
Global Cyber Threat Landscape Expands With Botnets, AI Abuses And Critical Vulnerabilities
Weekly cybersecurity bulletin highlights hybrid botnet activity, long standing Apache vulnerability chains, AI enabled attacks, major data breaches, and escalating cybercrime losses across global sectors and platforms.
SSHStalker Botnet Uses IRC Command And Control To Target Linux Systems With Legacy Kernel Exploits
Researchers uncover SSHStalker botnet leveraging IRC based command and control and legacy Linux kernel exploits to compromise systems and maintain persistent access across outdated infrastructure.
Lumen’s Black Lotus Labs Disrupts AISURU/Kimwolf Botnet Exploiting Residential Proxy Networks
Black Lotus Labs null-routed over 550 command-and-control nodes linked to AISURU/Kimwolf botnet, which compromises millions of Android devices and routers to provide residential proxy services for cybercriminals.
GoBruteforcer Botnet Targets Cryptocurrency Databases and LLM Endpoints
GoBruteforcer malware campaigns are actively brute-forcing credentials on FTP, MySQL, PostgreSQL, and phpMyAdmin services, exploiting weak defaults and targeting blockchain projects and misconfigured LLM endpoints.
RondoDox Botnet Exploits React2Shell Vulnerability Targeting IoT And Web Applications
Cybersecurity researchers report a nine-month-long RondoDox botnet campaign exploiting React2Shell vulnerability in Next.js and IoT devices, with thousands of systems at risk globally.
