174 Vulnerabilities Targeted by RondoDox Botnet

Multiple SecurityWeek reports describe an active and widening threat landscape: the RondoDox botnet is conducting up to ~15,000 exploitation attempts/day and now targets 174 distinct vulnerabilities; CISA says CVE-2025-47813 (Wing FTP) is being exploited in the wild; Akamai warns of coordinated Layer‑7 DDoS, API abuse and AI‑powered attacks; and nation‑state actors conducted long, patient espionage against Asian militaries. Other incidents include Storm‑2561 distributing fake VPN clients via SEO poisoning to steal credentials, a sophisticated DKIM‑signed phishing campaign targeting a security‑