IncidentsAnalysis4 min read
Law enforcement and industry partners dismantled servers and domains behind Gootloader, CastleRAT and StealC, with the Justice Department putting Gootloader's reach at 25,000 infected devices since 2018.
Threat intelExploitedCVE-2025-8875CVSS 9.42 min read
Black Lotus Labs says the Chinese state-linked group chained compromised routers and modems to mask attacks on edge and management systems, then wiped its tooling after each operation.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
Threat actors have been attempting to exploit the newly disclosed PHP2Shell flaws to enroll systems in a Mirai variant called Potassium, but the attempts have not worked, and weaponizing the bugs may be harder than first thought.
