Hackers Hijack Corporate XWiki Servers for Crypto Mining

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit XWiki Vulnerability for Cryptocurrency Mining Hackers have exploited a critical vulnerability in XWiki, identified as CVE-2025-24893, to hijack corporate servers for cryptocurrency mining. Active attacks have been confirmed by VulnCheck researchers, with exploits publicly available for over six months, initially used for reconnaissance purposes. 2 sources 14