Hackers Hiring Servers for Botnet by Exploiting XWiki Vulnerability in the Wild

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Widespread Exploitation of XWiki Vulnerability for Botnet Recruitment Hackers are actively exploiting a critical vulnerability in XWiki, tracked as CVE-2025-24893, to hire servers for botnet operations. This exploitation has escalated from isolated incidents to widespread attacks involving multiple threat actors. The situation poses significant risks to affected systems as the attacks continue to evolve. 3 sources 48