Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
The Cling botnet has been identified as exploiting a critical vulnerability (CVE-2021-35394) in the Realtek Jungle SDK, allowing attackers to deploy malware that disguises command-and-control (C2) traffic as legitimate STUN protocol exchanges. This vulnerability, which has a CVSS score of 9.8, was f...
A new variant of the Mirai botnet, named Broadside, is actively targeting the maritime logistics sector by exploiting a critical vulnerability (CVE-2024-3721) in TBK Vision DVR devices. This botnet employs a custom command and control protocol and unique modules for stealth and evasion, posing risks...
During the major AWS outage in October 2025, a Mirai-based botnet named ShadowV2 was identified infecting IoT devices across 28 countries. The botnet exploited known vulnerabilities in devices from manufacturers like D-Link and TP-Link, forming a network of compromised devices for potential future a...
Cybersecurity researchers report a rise in attacks targeting PHP servers, IoT devices, and cloud gateways. Botnets like Mirai, Gafgyt, and Mozi are exploiting known vulnerabilities and cloud misconfigurations to expand their reach. With PHP powering a significant portion of websites, the threat to t...
