Malwarecritical

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

The Hacker Newsby @TheHackersNewsJun 15, 2026 · 00:00 UTC (Jun 15, 2026)4 min read3 · 2 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-20118 CVE-2022-32548 CVE-2023-24738 CVE-2021-36260 CVE-2026-35616

Tags: cve-2021-36260 cve-2022-32548 cve-2023-20118 cve-2023-24738 cve-2026-35616 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-36260	Unauthenticated Command Injection in Hikvision Device Web Server	9.8	100%	KEVPoC ×3	Sep 22, 2021 KEV Jan 10, 2022
CVE-2022-32548	An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1	9.8	34%	PoC ×2	Aug 29, 2022
CVE-2023-20118	Authenticated Command Injection in Cisco Small Business RV Series Routers	7.2	54%	KEV	Apr 13, 2023 KEV Mar 3, 2025
CVE-2026-35616	Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6	9.8	94%	KEVPoC	Apr 4, 2026 KEV Apr 6, 2026

From the original article

4 min read at thehackernews.com

Cybersecurity researchers have warned of a "resurgence and expansion" of JDY , a covert network associated with China-nexus state-sponsored threat actors.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.