New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices
Summary: A significant DDoS botnet known as Eleven11bot has been identified, reportedly affecting around 86,400 IoT devices globally, with the majority located in the US. The botnet has been conducting extensive DDoS attacks across various sectors, showcasing exceptional size and capability among non-state actor networks. Prominent cybersecurity organizations are actively tracking its activities and impacts, particularly in light of geopolitical tensions involving Iran.…
Read More
Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication
Volexity has reported multiple Russian threat actors conducting social-engineering and spear-phishing campaigns aimed at compromising Microsoft 365 accounts through Device Code Authentication phishing. These campaigns have political themes, targeting various governmental and institutional entities. Users may not recognize the atypical workflow as phishing, leading to successful compromises.…
Read More
Cybersecurity News Review, Week 4 (2025)
This week’s cybersecurity overview includes critical vulnerabilities in various software and hardware, exploits of chained vulnerabilities, record-high DDoS attacks, and a notable ransomware surge, particularly impacting education and utilities. The article emphasizes the necessity for improved security measures across affected sectors. Affected: 7-Zip, Asus, Ivanti Cloud Service Appliances, Cisco, Cambium Networks, ABB, UK Education Sector, PowerSchool, US Utilities, Russia, Iran

Keypoints :

7-Zip has a critical vulnerability (CVE-2025–0411) that allows code execution by bypassing the Mark of the Web security feature.…
Read More

In recent months, Indonesia has emerged as a significant hotspot in the global cybersecurity landscape, as cybercriminals exploit vulnerabilities in Internet of Things (IoT) devices to launch large-scale distributed denial-of-service (DDoS) attacks. A new variant of the infamous Mirai botnet, dubbed Murdoc Botnet, has been actively targeting IoT devices, including AVTECH IP cameras and Huawei HG532 routers, with Indonesia being one of the most affected countries.…

Read More
IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024
This article discusses the ongoing large-scale DDoS attacks orchestrated by an IoT botnet that exploits vulnerable devices, primarily targeting companies in Japan and other countries. The botnet utilizes malware derived from Mirai and Bashlite, affecting various sectors and employing multiple DDoS attack methods. Affected: Japan, North America, Europe

Keypoints :

Large-scale DDoS attacks monitored since the end of 2024.…
Read More

Summary: The Cyber Resilience Act in Europe and similar regulations in the UK and US are pushing manufacturers of Internet of Things (IoT) devices to enhance security standards amidst rising cyber threats. This regulatory shift aims to eliminate weak practices like default passwords and inadequate software updates that have contributed to significant vulnerabilities in connected devices.…
Read More

The Federal Communications Commission (FCC) will be rolling out a voluntary cybersecurity labeling program for Internet of Things (IoT) products for consumers

At its public meeting today, the Commission unanimously voted to approve the program, which will allow IoT manufacturers to slap US Cyber Trust Certification Marks onto products that meet certain minimum criteria defined by the National Institute for Standards and Technology (NIST).…

Read More