RondoDox Botnet Exploiting Critical XWiki Vulnerability to Hijack Servers for Crypto Mining

RondoDox Botnet Exploiting Critical XWiki Vulnerability to Hijack Servers for Crypto Mining

You know what I love? When a critical remote code execution vulnerability with a CVSS score of 9.8 gets a patch released, and then multiple threat actors immediately start exploiting it anyway because nobody bothered to update their shit. Welcome to CVE-2025-24893, the XWiki RCE that's turning servers into botnet zombies. XWiki? What the Hell … Continue reading RondoDox Botnet Exploiting Critical XWiki Vulnerability to Hijack Servers for Crypto Mining