Securityweek

Widespread Exploitation of XWiki Vulnerability by Threat Actors

First seen 2 Dec 2025, 18:33 UTC • Feeds.Feedburner

•23.5

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Threat actors have begun exploiting a critical vulnerability in XWiki within two weeks of its discovery. The exploitation has escalated to involve botnets, cryptocurrency miners, scanners, and custom tools, affecting various systems that utilize XWiki software.

How this analysis works

Continue Reading

RondoDox Botnet Targets React2Shell Flaw to Spread Malware Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure GCHQ Warns of Escalating Russian Cyber Threats to UK Infrastructure Operation Endgame Disrupts Evil Corp's SocGholish Malware Network CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

Widespread Exploitation of XWiki Vulnerability by Threat Actors

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading