Mastodawn

📢 VulnCheck 2026: 1% des CVE 2025 exploitées, React2Shell et la chaîne SharePoint « ToolShell » en tête
📝 Source: VulnCheck — Exploit Intelligence Report 2026.
📖 cyberveille : https://cyberveille.ch/posts/2026-03-09-vulncheck-2026-1-des-cve-2025-exploitees-react2shell-et-la-chaine-sharepoint-toolshell-en-tete/
🌐 source : https://wwv.vulncheck.com/hubfs/Research/2026-VulnCheck-Exploit-Intelligence-Report.pdf
#Botnets #Microsoft_SharePoint #Cyberveille

VulnCheck 2026: 1% des CVE 2025 exploitées, React2Shell et la chaîne SharePoint « ToolShell » en tête

Source: VulnCheck — Exploit Intelligence Report 2026. Ce rapport rétrospectif et chiffré dresse le panorama de l’exploitation des vulnérabilités en 2025 (500+ sources, 2 douzaines d’indices VulnCheck), en priorisant l’exploitation in‑the‑wild, la maturité des exploits et le comportement des attaquants. Chiffres clés et tendances 48 174 CVE publiées en 2025 (83% avec identifiant 2025) ; ~1% exploitées in‑the‑wild à fin 2025. 14 400+ exploits pour des CVE 2025 (+16,5% YoY), mais >98% restent des PoC non weaponized ; 417 exploits weaponized (majoritairement privés/commerciaux). 884 vulnérabilités ajoutées au VulnCheck KEV en 2025 (47,7% avec identifiant 2025) ; 28,96% exploitées le jour de la publication CVE ou avant. Ransomware: 39 CVE 2025 attribuées, 56,4% découvertes via exploitation zero‑day ; 1/3 sans exploit public/commercial au 01/2026. Montée du bruit IA: prolifération de faux/faux‑positifs PoC générés par IA, contaminant l’écosystème (ex: premiers PoC React2Shell non fonctionnels largement relayés). Vulnérabilités phares 2025

CyberVeille

Ars Technica News 6d ago

14,000 routers are infected by malware that's highly resistant to takedowns https://arstechni.ca/hwAw #distributedhashtables #Security #botnets #malware #routers #Biz&IT #Tech #ASUS

14,000 routers are infected by malware that's highly resistant to takedowns

Most of the devices are made by Asus and are located in the US.

Ars Technica

Negative PID SL Mar 1

Botnet for profit: Jeanson James Ancheta

https://negativepid.blog/botnet-for-profit-the-story-of-jeanson-james-ancheta/

#botnets #cybercrime #hackers #jeansonJamesAncheta #Cybersecurity #cyberattacks #cyberThreats #onlineSecurity #negativepid

Botnet for profit: Jeanson James Ancheta - Negative PID

Early hackers were fuelled by curiosity and defiance of authority. Jeanson James Ancheta changed that forever.

Negative PID

TechNadu Feb 6

Poland’s Central Bureau for Combating Cybercrime (CBZC) has announced the arrest of a 20-year-old suspect linked to global DDoS activity.

Authorities state that the attacks leveraged C2 stressers and CNC nodes within a multi-layered botnet architecture. Equipment used to host and distribute the DDoS tooling was seized during a search, effectively dismantling the setup.

From a defensive standpoint, this case highlights how botnet infrastructure is assembled - and how law enforcement intervenes once attribution is established.

What defensive signals best indicate stresser-based DDoS activity at scale?

Source: https://www.helpnetsecurity.com/2026/02/05/ddos-poland-suspect-arrested/

Join the discussion and follow @technadu for grounded infosec reporting.

#Infosec #DDoSDefense #Botnets #IncidentResponse #CyberOperations #TechNadu #ThreatAnalysis

Günter Born Feb 5

#Rustdesk durch Angriffe eines #Botnets zeitweise offline

https://borncity.com/blog/2026/02/06/rustdesk-durch-botnet-angriffe-immer-wieder-offline/

Rustdesk durch Botnet-Angriffe immer wieder offline (Feb. 2026)

Kurze Information für Blog-Leser die die Remote Desktop-Lösung Rustdesk einsetzen. Ein Blog-Leser hat mich darüber informiert (danke), dass deren Server „momentan“ offline seien. Aussage war: „das…

Borns IT- und Windows-Blog

Show thread

The Spamhaus Project Jan 27

Instead, threats are shifting to weaker networks and resilient rogue hosting providers, while botnet controller domains continue to rise 🌐⬆️.

Read the full Botnet Spotlight here 👉 https://www.spamhaus.org/resource-hub/botnet-c-c/botnet-spotlight-pressure-rises-on-botnets-but-the-fight-is-far-from-over/

#Botnets #Malware #BulletproofHosts

2/2

Resources | Spotlight Botnet Threat Update July - December 2025

Learn more about the fight against botnet in the latest edition of the Botnet Spotlight.

The Spamhaus Project

Teddy / Domingo (🇨🇵/🇬🇧)Jan 14

Votre #box alimente peut-être à un #botnet, et cet outil gratuit permet de le verifier. On répète depuis des mois qu’il faut mettre à jour ses box, #routeurs et objets connectés pour éviter les #botnets, sans toujours expliquer comment vérifier si l’on héberge déjà un #bot. GreyNoise tente d’apporter une réponse avec #IPCheck, un outil en ligne gratuit.
https://www.clubic.com/actualite-594979-votre-box-alimente-peut-etre-a-un-botnet-et-cet-outil-gratuit-permet-de-le-verifier.html

Votre box alimente peut-être à un botnet, et cet outil gratuit permet de le vérifier

On répète depuis des mois qu’il faut mettre à jour ses box, routeurs et objets connectés pour éviter les botnets, sans toujours expliquer comment vérifier si l’on héberge déjà un bot. GreyNoise tente d’apporter une réponse avec IP Check, un outil en ligne gratuit.

clubic.com

PrivacyDigest Jan 9

Who Benefited from the #Aisuru and #Kimwolf #Botnets ?
#security

https://krebsonsecurity.com/2026/01/who-benefited-from-the-aisuru-and-kimwolf-botnets/

Who Benefited from the Aisuru and Kimwolf Botnets? – Krebs on Security

ResearchBuzz: Firehose Dec 20

Lifehacker: This Tool Can Tell You If Your Home Network Has Been Compromised. “IP Check, from threat monitoring firm GreyNoise, will alert you if your IP address has been observed scanning the internet as part of a botnet or residential proxy network.”

https://rbfirehose.com/2025/12/20/lifehacker-this-tool-can-tell-you-if-your-home-network-has-been-compromised/

Lifehacker: This Tool Can Tell You If Your Home Network Has Been Compromised | ResearchBuzz: Firehose

ResearchBuzz: Firehose | Individual posts from ResearchBuzz

Danie van der Merwe Dec 20

GreyNoise launches a free scanner to check if you’re part of a botnet

“GreyNoise Labs has launched a free tool called GreyNoise IP Check that lets users check if their IP address has been observed in malicious scanning operations, like botnet and residential proxy networks. The threat monitoring firm that tracks inter ...continues

See https://gadgeteer.co.za/greynoise-launches-a-free-scanner-to-check-if-youre-part-of-a-botnet/

#botnets #privacy #technology

GreyNoise launches a free scanner to check if you're part of a botnet

“GreyNoise Labs has launched a free tool called GreyNoise IP Check that lets users check if their IP address has been observed in malicious scanning

GadgeteerZA