#shadowserver — Public Fediverse posts

🚀 Vulnerability-Lookup 5.3.0 has landed with a new email notification service. 📬

Pick any Known Exploited #Vulnerabilities catalog — #CISA, #ENISA, #Shadowserver, CIRCL, KEVIntel — and get a batched email digest the moment new entries land. Exploited-in-the-wild intel, delivered straight to your inbox. No polling, no scraping.

Full release notes 👉 https://www.vulnerability-lookup.org/2026/07/07/vulnerability-lookup-5-3-0/

Try it live at https://vulnerability.circl.lu

Feel free to create an account if you want to use the email notification service.

FBI Seizes NetNut Proxy Platform, Popa Botnet

https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/

#InternalRevenueServiceCriminalInvestigation #GoogleThreatIntelligenceGroup #AlarumTechnologiesLtd #Ne'er-Do-WellNews #BenjaminBrundage #ALittleSunshine #Shadowserver #WebFraud2.0 #Popabotnet #Synthient #Samsung #google #IPidea #NetNut #Lumen #fbi #LG

A new KEV Catalog built from real-world exploitation data !

https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/?sort=first_seen&catalog_uuid=c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8

We are excited to share the result of a fruitful collaboration with @shadowserver: a new Known Exploited Vulnerabilities (KEV) Catalog (BCP-07 compliant) built directly from their global honeypot telemetry.

#ShadowServer #KEV #GCVE #Vulnerability #VulnerabilityManagement #Decentralization #Fragmentation

CrowdStrike and Google take down botnet used by hackers to target software developers in supply chain attacks

#botnet #crowdstrike #github #glassworm #google #shadowserver

https://techcrunch.com/2026/05/27/crowdstrike-and-google-take-down-botnet-used-by-hackers-to-target-software-developers-in-supply-chain-attacks/

Rhadamanthys infostealer operation disrupted by law enforcement https://www.helpnetsecurity.com/2025/11/13/rhadamanthys-infostealer-operation-disrupted/ #lawenforcement #Shadowserver #Don'tmiss #Hotstuff #Europol #malware #News

Oh #ShadowServer, now you're just being silly...

#InfoSec #Scanners

Exploit for critical SAP Netweaver flaws released (CVE-2025-31324, CVE-2025-42999) https://www.helpnetsecurity.com/2025/08/20/cve-2025-31324-cve-2025-42999-sap-netweaver-exploit-public/ #vulnerability #Shadowserver #SAPsecurity #Don'tmiss #Hotstuff #exploit #Onapsis #News #SAP

Over 29,000 Unpatched Microsoft Exchange Servers Leaving Networks at Risk https://hackread.com/29k-microsoft-exchange-servers-unpatched-networks-risk/ #MicrosoftExchange #Cybersecurity #Vulnerability #Shadowserver #Microsoft #Security #CISA

Over 29,000 Unpatched Microsoft Exchange Servers Leaving Networks at Risk – Source:hackread.com https://ciso2ciso.com/over-29000-unpatched-microsoft-exchange-servers-leaving-networks-at-risk-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #MicrosoftExchange #cybersecurity #Vulnerability #Shadowserver #Microsoft #Hackread #security #CISA

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543) https://www.helpnetsecurity.com/2025/08/12/citrix-netscaler-exploitation-zero-day-cve-2025-6543/ #Shadowserver #Don'tmiss #NetScaler #Hotstuff #Fortinet #NCSC-NL #Citrix #Europe #News

Here is #Shadowserver's announcement on the global #OperationEastwood which aimed for the #NoName05716 #APT.

https://infosec.exchange/@shadowserver/114863740047451178

There are various public statements, including Europol's post linked here. The members are also listed on Europe's most wanted list. Likewise, the #German #BKA published a multi-lingual statement on the #DDoSia operators and members.

#Eastwood #DDoSia #DDoS #infosec

Roundcube RCE: Dark web activity signals imminent attacks (CVE-2025-49113) https://www.helpnetsecurity.com/2025/06/09/roundcube-rce-dark-web-activity-signals-imminent-attacks-cve-2025-49113/ #vulnerability #Shadowserver #Don'tmiss #Roundcube #Hotstuff #FearsOff #CERT-PL #exploit #News #PoC

Hoe de sluiting van BidenCash de wereld van carding marktplaatsen verandert

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-nieuws-trends/darkweb/2548908_hoe-de-sluiting-van-bidencash-de-wereld-van-carding-marktplaatsen-verandert

Podcast Spotify: https://open.spotify.com/episode/6tLnBUOe7pv45jySLVdV4n?si=7744c9cfb31640d6

Podcast Youtube: https://youtu.be/OOr4dH6LUm8?si=cRM3CNnW_JCSjPG-

#BidenCash #Carding #Darkweb #Cybercrime #Cybersecurity #InternationalCooperation #DigitalCrimes #FBI #NHTCU #Cryptocurrency #Ransomware #DataTheft #DomainSeizure #DigitalFraud #CyberThreats #MultifactorAuthentication #Shadowserver #CybercrimePrevention #CyberWar #TechCrime

145 criminal domains linked to BidenCash Marketplace seized https://www.helpnetsecurity.com/2025/06/06/bidencash-marketplace-domains-seized/ #SearchlightCyber #cryptocurrency #lawenforcement #cybersecurity #Shadowserver #government #USDoJ #News #FBI #USA

DanaBot botnet disrupted, QakBot leader indicted https://www.helpnetsecurity.com/2025/05/23/operation-endgame-danabot-botnet-disrupted-qakbot-leader-indicted/ #lawenforcement #Shadowserver #CrowdStrike #Proofpoint #Don'tmiss #Hotstuff #Eurojust #Europol #Zscaler #Fox-IT #court #USDoJ #News #ESET

Attackers are targeting CrushFTP vulnerability with public PoC (CVE-2025-2825) https://www.helpnetsecurity.com/2025/04/01/crushftp-vulnerability-exploitation-cve-2025-2825/ #Shadowserver #Don'tmiss #VulnCheck #Hotstuff #CrushFTP #Rapid7 #News #CVE #PoC

New post from the #VulnerabilityLookup project about #Shadowserver and Sightings:

https://www.vulnerability-lookup.org/2025/01/22/shadowserver-sightings-in-vulnerability-lookup/

You can subscribe to the blog:
https://www.vulnerability-lookup.org/news/index.xml !

#opensource #cybersecurity #vulnerability #VulnerabilityLookup #TheShadowserverFoundation

48,000+ internet-facing Fortinet firewalls still open to attack https://www.helpnetsecurity.com/2025/01/22/48000-internet-facing-fortinet-firewalls-still-open-to-attack/ #ArcticWolfNetworks #Shadowserver #enterprise #Don'tmiss #Hotstuff #firewall #Fortinet #Kroll #News #Asia #USA

UK domain registry Nominet breached via Ivanti zero-day https://www.helpnetsecurity.com/2025/01/13/uk-domain-registry-nominet-breached-via-ivanti-zero-day-cve-2025-0282/ #Shadowserver #Don'tmiss #WatchTowr #Hotstuff #Mandiant #Nominet #Ivanti #0-day #News #CISA

2,000 Palo Alto Networks devices compromised in latest attacks https://www.helpnetsecurity.com/2024/11/21/palo-alto-firewalls-compromised-cve-2024-0012-cve-2024-9474/ #PaloAltoNetworks #Shadowserver #enterprise #Don'tmiss #Hotstuff #firewall #India #News #CVE #USA

87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113) https://www.helpnetsecurity.com/2024/10/15/cve-2024-23113/ #vulnerability #Shadowserver #enterprise #Don'tmiss #WatchTowr #Hotstuff #Fortinet #FortiOS #News #CVE

17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns https://www.helpnetsecurity.com/2024/03/26/vulnerable-microsoft-exchange-servers/ #MicrosoftExchange #vulnerability #Shadowserver #enterprise #Don'tmiss #Hotstuff #Germany #News #BSI

Reading my selfhosted Mastodon Nginx server logs and I see that The Shadow Server Foundation scanned my instance today.

I wonder if this is just a general search for flaws in Mastodon code or if there is something specific going on that flagged my instance.

#infosec #ShadowServer

And since we're here... A comparison of #Censys and #Shadowserver's #MSMQ probes. They are using the same probe except for the padding.

How do I know all this? May have quickly set up a terrible #honeypot last night 😄​

#QueueJumper

Vulnerability with 9.8 severity in Control Web Panel is under active exploit

Malicious #hackers have begun exploiting a critical #vulnerability in unpatched versions of the #ControlWebPanel , a widely used interface for web hosting.

“This is an #unauthenticated #RCE ,” members of the #Shadowserver group wrote

https://arstechnica.com/?p=1909755