Apache Struts DoS flaws span CVE-2026-73633, CVE-2026-73634, and CVE-2026-73635, plus two JSON plugin bugs. Upgrade to 7.3.0.

#ApacheStruts #Struts2 #DoS #CVE #JavaWeb #CyberSecurity #InfoSec #Vulnerability

http://securityonline.info/apache-struts-dos-flaws-json-plugin/?utm_source=mastodon&utm_medium=jetpack_social

Dysphoria Botnet Campaign Targeting IoT Devices for DDoS Attacks

Pulse ID: 6a7f750c25e71ea88a305576
Pulse Link: https://otx.alienvault.com/pulse/6a7f750c25e71ea88a305576
Pulse Author: cryptocti
Created: 2026-08-14 20:05:32

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DDoS #DoS #InfoSec #IoT #OTX #OpenThreatExchange #bot #botnet #cryptocti

Multi-Functional Linux Botnet "Evooo1Bot"

A previously undocumented Linux botnet named Evooo1Bot has been discovered, actively targeting Internet-facing devices since July 2026. Built upon Mirai's DDoS engine, it extends functionality with encrypted C2 communications, SSH brute-force scanning, SOCKS relay capabilities, credential sniffing, and an integrated exploit arsenal. The malware employs multi-layer string encryption using AES-256-CTR, ChaCha20, and XOR-based key derivation. It exploits numerous vulnerabilities across edge devices, routers, and enterprise applications. The reverse SOCKS relay module transforms compromised devices into persistent proxies, enabling attackers to conceal their origin and pivot into internal networks. The botnet features 28 remote commands organized into modules for persistence, self-update, file transfer, interactive shell, sniffing, proxy relay, SSH scanning, DDoS attacks, and CVE exploitation. Multiple persistence mechanisms ensure continued operation across systemd, SysV init, cron, and shell profiles.

Pulse ID: 6a7e2be6ba37cc87ae552659
Pulse Link: https://otx.alienvault.com/pulse/6a7e2be6ba37cc87ae552659
Pulse Author: AlienVault
Created: 2026-08-13 20:41:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChaCha20 #CyberSecurity #DDoS #DoS #ELF #Edge #Encryption #InfoSec #Linux #Malware #Mirai #OTX #OpenThreatExchange #Proxy #RAT #RCE #SMS #SSH #bot #botnet #AlienVault

Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side

Indicators extracted from public reporting. Source: https://sed-cms.broadcom.com/sites/default/files/2026-08/Jewelbug%20Dossier.pdf

Pulse ID: 6a7da2dc1ab7ab31faf83152
Pulse Link: https://otx.alienvault.com/pulse/6a7da2dc1ab7ab31faf83152
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:56:27

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DoS #Espionage #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #PDF #RAT #RCE #bot #CyberHunter_NL

🤖 Cisco: CVE-2026-20349 (CVSS 8.6) - unauthenticated remote DoS in ASA & Firepower Threat Defense, actively exploited in the wild to crash devices. Insufficient error checking on HTTP requests. Patch firewalls now.
🔗 https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html
#CVE #CyberSec #Cisco #DoS

Cisco confirms CVE-2026-20349, a Cisco ASA and FTD VPN vulnerability (CVSS 8.6), is exploited in the wild to crash firewalls. Patch now.

#Cisco #CVE #DoS #FirewallSecurity #VPN #InfoSec

https://securityonline.info/cisco-asa-ftd-vpn-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

See: https://anarchicharmony.org/People/Culver/CagePrograms.html

(On the contrary, when I think about reviving my school projects from around 7–10 years ago—node.js and all that—my head hurts.)

#music #permacomputing #dos