60
60
60
60
60
Massive Redis Cryptojacking Campaign Hijacks Thousands of Linux Servers
RedisRaider cryptojacking campaign compromises thousands of exposed, unauthenticated Linux Redis servers using cron persistence to deploy XMRig Monero miners.
Hunt.io researchers track a large-scale cryptojacking operation named RedisRaider that scans IPv4 ranges for Redis services exposed on TCP port 6379 and targets instances accepting unauthenticated connections. From a master list of 12,966 candidate hosts, 2,342 were confirmed to accept commands without authentication. Attackers abuse Redis commands (CONFIG SET dir/dbfilename, SET, BGSAVE) to write malicious cron entries into /etc/cron.d or /var/spool/cron, launching XMRig-based Monero miners, with branches including SSH authorized-key injection, Lua probing, and WordPress spraying. The article also references CVE-2026-81934, a Redis TLS use-after-free allowing unauthenticated command execution, fixed in releases including 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.
60
AI-driven bug hunting fuels record Microsoft Patch Tuesday
60
60
AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE
60
60
60
60
60
60
New Fortinet and Ivanti Zero Days Exploited in the Wild
60
Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
60
60
60
60
Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed
60
60
60
60
60
60
60
Hackers Actively Searching for Unpatched Microsoft Exchange Servers
60
60