logo

Cyble Sensors Spot Attacks On Java & IoT Devices

ID: 2dabacb0-e0a3-569f-bf9d-da4dade1996c

STIX ID: report--2dabacb0-e0a3-569f-bf9d-da4dade1996c

Feed Name: Cyble Blog

Threat Score
75/100

Date Published: 2025-12-23

Date Updated: 2026-07-16

...
...

Cyble’s weekly sensor report documents more than 30 active attack campaigns, highlighting a high-severity Spring Framework path-traversal (CVE-2024-38816), widespread exploitation of the Treck TCP/IP "Ripple20" family (CVE-2020-11899) with over 411,000 observed attacks, ongoing Linux-targeting malware (CoinMiner, Mirai, IRCBot), 478 new phishing addresses, and thousands of brute-force attempts; it concludes with mitigation advice such as patching, blocking malicious IPs/hashes, resetting defaults, and monitoring ASNs and Suricata alerts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.