Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A cryptomining botnet has compromised 3,562 Redis servers, primarily due to missing authentication. The attack targeted a shared list of 12,966 hosts, with a significant success rate of 22-26%. The compromised servers span Redis versions from 2.8.17 to 7.2.0 and various Linux distributions, indicati...
A zero-day vulnerability in Gogs, a self-hosted Git service, is being actively exploited, affecting over 700 instances. Discovered by Wiz Research during a malware investigation, the vulnerability allows authenticated users to execute remote code by overwriting files outside the repository. As of De...
CrowdStrike has reported on WARP PANDA, a China-linked cyber-espionage group targeting North American legal, technology, and manufacturing firms throughout 2025. The group specializes in covert operations within hybrid-cloud environments, focusing on platforms like Microsoft 365 and Azure, and has b...
