Want More XWorm?, (Wed, Mar 4th)

SANS ISC feed notes an ongoing wave of XWorm infections using multi-technology payloads and evolving delivery techniques, highlighting that prolific malware families continue to adapt. Separate entries report brute-force scans targeting CrushFTP and call out earlier serious CrushFTP vulnerabilities (including an actively exploited 2025 zero-day). Other items include a phishing campaign masquerading as FedEx that delivered malware, a how-to on extracting ZIPs from RTFs (relevant to document-based delivery), and a Wireshark 4.6.4 release that fixes multiple vulnerabilities. Organizations should: