ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories
2026-04-09T13:24:12Z•becaa1f5404759d440d539fd5db3a47a1aa092bdd2d1c1a4d4695479f34400f6
CVE-2024-41110CVE-2025-59528CVE-2026-34040active-exploitationadobe-readerapt28botnetchaos-malwarecloud-misconfigurationcomfyuicryptominingddos-for-hiredockerflowisegpubreachiotmasjesunpm-pypi-go-rust-malwareplc-attacksrceremote-code-executionrowhammerstate-sponsoredsupply-chainzero-day
What happened
This bulletin aggregates multiple active threats and high-impact vulnerabilities: a Flowise RCE (CVE-2025-59528, CVSS 10.0) under active exploitation across 12,000+ exposed instances; a Docker Engine authorization-bypass (CVE-2026-34040, CVSS 8.8) tied to an incomplete fix for CVE-2024-41110; an Adobe Reader zero-day exploited via malicious PDFs since late 2025; widespread botnet activity (Masjesu, Chaos variant, Masjesu DDoS-for-hire) targeting IoT and misconfigured cloud deployments; over 1,000 exposed ComfyUI instances enlisted into cryptomining/proxy botnets; new GPU RowHammer-style GPUBRE
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- becaa1f5404759d440d539fd5db3a47a1aa092bdd2d1c1a4d4695479f34400f6
- Enrichment time
- 2026-04-09T13:24:12Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.