Securityweek

Exploitation of XWiki Vulnerability Expands to Multiple Threat Vectors

First seen 17 Nov 2025, 15:14 UTC • Feeds.Feedburner

•39.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Threat actors have begun exploiting a critical vulnerability in XWiki within two weeks of its report. The exploitation has escalated to involve botnets, cryptocurrency miners, scanners, and custom tools, indicating a broadening scope of attack methods.

How this analysis works

Continue Reading

RondoDox Botnet Targets React2Shell Flaw to Spread Malware Lazarus Group Exploits Windows Zero-Day to Target Defense Sector CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices GCHQ Warns of Escalating Russian Cyber Threats to UK Infrastructure Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

Exploitation of XWiki Vulnerability Expands to Multiple Threat Vectors

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading