wazuh News Articles

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation

2 weeks ago

Mirai Botnets Exploit Flaw in Wazuh Security Platform

The two campaigns are good examples of the ever-shrinking time-to-exploit timelines that botnet operators have adopted for newly published CVEs.

2 weeks ago

Critical Wazuh bug exploited in Mirai botnet expansion drive

Cybercriminals are trying to spread multiple Mirai variants by exploiting a critical Wazuh vulnerability, researchers say – the first reported active attacks since the code execution bug was disclosed. The...

2 weeks ago

Unpatched Wazuh servers targeted by Mirai botnets (CVE-2025-24016) - Help Net Security

Two Mirai botnets are exploiting a RCE vulnerability (CVE-2025-24016) in the open-source Wazuh XDR/SIEM platform.

2 weeks ago

Exploitation of Critical Wazuh Server RCE Vulnerability Leads to Mirai Variant Deployment

The Akamai Security Intelligence and Response Team (SIRT) has uncovered active exploitation of a critical RCE vulnerability in Wazuh servers.

2 weeks ago

Mirai Botnets Exploit Flaw in Unpatched Wazuh Servers

No fewer than two separate Mirai botnets are on the hunt for unpatched servers hosting open source SIEM solution Wazuh, an unusual variation of hackers' typical

2 weeks ago

Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks

Mirai botnets exploit Wazuh Server flaw CVE-2025-24016 to conduct DDoS and infect IoT devices worldwide.

2 weeks ago

Mirai Botnets Exploiting Wazuh Security Platform Vulnerability 

CVE-2025-24016, a critical remote code execution vulnerability affecting Wazuh servers, has been exploited by Mirai botnets.

2 weeks ago

Wazuh Open Source SIEM Vulnerability Allows Malicious Code Execution Remotely

Cybersecurity researchers have disclosed a critical remote code execution vulnerability (CVE-2025-24016) affecting Wazuh.

Wazuh SIEM Vulnerability Enables Remote Malicious Code Execution

A critical vulnerability, identified as CVE-2025-24016, has been discovered in the Wazuh Security Information and Event Management (SIEM) platform.

Critical Vulnerability in Wazuh Server Enables Remote Attackers to Execute Malicious Code

A critical remote code execution (RCE) vulnerability has been discovered in the Wazuh server, a popular open-source security platform used for threat detection and compliance monitoring.

Last Week in Security (LWiS) - 2025-02-25

ADIDNS Parser (@the_bit_diddler), Parallels LPE (@patch1t), PowerChell (@itm4n), SACL Scanner (Alexander DeMine of @SpecterOps), and more! Last Week in Security is a summary of the interesting cybersecurity...

Critical Wazuh RCE Vulnerability (CVE-2025-24016): Risks, Exploits and Remediation

Overview SonicWall Capture Labs threat research team has become aware of a critical remote code execution (RCE) vulnerability in Wazuh Server (CVE-2025-24016) and has implemented mitigating measures. Wazuh is...

Critical Wazuh RCE Vulnerability (CVE-2025-24016): Risks, Exploits and Remediation

Overview SonicWall Capture Labs threat research team has become aware of a critical remote code execution (RCE) vulnerability in Wazuh Server (CVE-2025-24016) and has implemented mitigating measures. Wazuh is...