{"id":16718,"date":"2025-06-16T11:29:45","date_gmt":"2025-06-16T08:29:45","guid":{"rendered":"https:\/\/digitrendz.blog\/?p=16718"},"modified":"2025-06-16T11:29:49","modified_gmt":"2025-06-16T08:29:49","slug":"microsoft-patches-zero-day-flaw-as-mirai-botnets-hit-wazuh-servers","status":"publish","type":"post","link":"https:\/\/digitrendz.blog\/z\/newswire\/technology\/16718\/microsoft-patches-zero-day-flaw-as-mirai-botnets-hit-wazuh-servers\/","title":{"rendered":"Microsoft patches zero-day flaw as Mirai botnets hit Wazuh servers"},"content":{"rendered":"
\u25bc Summary<\/summary>\n

– Microsoft fixed 66 CVEs in June 2025 Patch Tuesday, including an exploited zero-day (CVE-2025-33053).
– Unpatched Wazuh servers are being targeted by Mirai botnets exploiting a critical RCE vulnerability (CVE-2025-24016).
– Kali Linux 2025.2 was released, featuring Bloodhound CE, CARsenal, and 13 new tools for penetration testing.
– Attackers are brute-forcing Microsoft Entra ID accounts using the TeamFiltration framework, as reported by Proofpoint.
– LockBit ransomware operations netted $2.3 million in 5 months, with Chinese organizations among the most targeted.
<\/p>\n<\/details>\n\n

<\/p>\n\n

M<\/mark>icrosoft addresses critical zero-day vulnerability<\/a> while Mirai botnets exploit unpatched Wazuh<\/a> servers, highlighting the escalating challenges in cybersecurity defense.<\/strong><\/p>\n\n

The tech giant rolled out fixes for 66 security flaws<\/strong> in its June 2025 Patch Tuesday<\/a> update, including a zero-day exploit<\/a> (CVE-2025-33053)<\/strong> actively used in cyber espionage campaigns. Meanwhile, security researchers at Akamai<\/a> uncovered two Mirai botnets<\/strong> targeting unpatched Wazuh XDR\/SIEM platforms<\/strong> through a critical remote code execution<\/a> flaw (CVE-2025-24016)<\/strong>.<\/p>\n\n

Threat modeling remains undervalued despite its critical role in proactive security.<\/strong> While CISOs<\/a> recognize its importance for early risk identification, competing priorities like new tools or reactive measures often overshadow it in budget discussions.<\/p>\n\n

Offensive Security<\/a> released Kali Linux<\/a> 2025.2<\/strong>, packed with 13 new tools<\/strong>, including Bloodhound CE<\/a><\/strong> and CARsenal<\/a><\/strong>, reinforcing its position as a leading platform for penetration testing.<\/p>\n\n

In identity security, Proofpoint<\/a> researchers<\/strong> detected an ongoing Entra ID account takeover campaign<\/strong> leveraging the TeamFiltration<\/a> framework<\/strong> for brute-force attacks. Meanwhile, Citizen Lab<\/a><\/strong> exposed a zero-click iOS exploit (CVE-2025-43200)<\/strong> delivering Graphite<\/a> spyware<\/strong> to journalists\u2019 iPhones.<\/p>\n\n

The LockBit ransomware<\/strong> operation reportedly amassed $2.3 million in five months<\/strong>, with Chinese organizations among the most targeted, according to leaked affiliate panel data.<\/p>\n\n

ConnectWise<\/strong> initiated emergency code-signing certificate rotations<\/strong> for ScreenConnect, Automate, and RMM solutions, urging customers to update systems by June 13<\/strong> to avoid disruptions.<\/p>\n\n

The EU launched DNS4EU<\/strong>, a privacy-focused DNS resolution service<\/strong>, to bolster digital sovereignty. Meanwhile, INTERPOL\u2019s Operation Secure<\/strong> dismantled 20,000 malicious IPs and domains<\/strong> linked to infostealer malware.<\/p>\n\n

AI adoption is surging<\/strong>, with 86% of security teams<\/strong> increasing AI usage to counter AI-driven threats. However, 84% of organizations<\/strong> now using AI in the cloud face new attack vectors, per Orca Security<\/strong>.<\/p>\n\n

API security remains a blind spot<\/strong>, with legacy tools failing to detect risks in thousands of repositories. StackHawk\u2019s CEO<\/strong> emphasized the need for pre-deployment API visibility<\/strong> to prevent breaches.<\/p>\n\n

A critical Roundcube flaw (CVE-2025-49113)<\/strong> is being actively exploited, with dark web sales of exploits signaling imminent attacks.<\/p>\n\n

For defenders, OWASP Nettacker<\/strong> offers an open-source network scanner<\/strong>, while fiddleitm<\/strong> helps detect malicious web traffic via mitmproxy<\/strong>.<\/p>\n\n

Cybersecurity hiring remains robust<\/strong>, with new roles emerging weekly. Additionally, CIS Hardened Images<\/strong> provide cloud security enhancements, particularly for public sector organizations.<\/p>\n\n

As threats evolve, the key takeaway is clear: more data isn\u2019t the solution, reducing noise and prioritizing actionable intelligence is critical for effective defense.<\/strong><\/p>\n\n

(Source: <\/em>HelpNet Security<\/a>)<\/em><\/p>\n\n

<\/p>","protected":false},"excerpt":{"rendered":"

Microsoft patched 66 security flaws, including a zero-day exploit (CVE-2025-33053), while Mirai botnets targeted unpatched Wazuh servers via a critical RCE flaw (CVE-2025-24016). Threat modeling is undervalued despite its importance, as competing priorities like new tools often overshadow it in b…<\/p>\n","protected":false},"author":1,"featured_media":16717,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"cybocfi_hide_featured_image":"","footnotes":""},"categories":[6579,3297,3327,3254],"tags":[12462,19722,15299,16329,19721],"entities":[7233,19746,19743,19744,19750,14296,3556,15108,16060,2311,15698,3563,1769,19742,14621,904,18399,19741,15699,19745,19003,16254,19749,18402,19747,14130,15109,19748,18398,19740],"class_list":["post-16718","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bigtech-companies","category-cybersecurity","category-newswire","category-technology","tag-cybersecurity-threats","tag-microsoft-patch-tuesday","tag-mirai-botnet","tag-wazuh-vulnerability","tag-zero-day-exploit","entity-akamai","entity-automate","entity-bloodhound-ce","entity-carsenal","entity-cis-hardened-images","entity-cisos","entity-citizen-lab","entity-connectwise","entity-dns4eu","entity-eu","entity-fiddleitm","entity-graphite","entity-ios","entity-kali-linux","entity-lockbit","entity-microsoft","entity-microsoft-entra-id","entity-mirai","entity-mitmproxy","entity-offensive-security","entity-operation-secure","entity-orca-security","entity-owasp-nettacker","entity-proofpoint","entity-rmm","entity-roundcube","entity-screenconnect","entity-stackhawk","entity-teamfiltration","entity-wazuh"],"_links":{"self":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts\/16718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/comments?post=16718"}],"version-history":[{"count":0,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts\/16718\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/media\/16717"}],"wp:attachment":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/media?parent=16718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/categories?post=16718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/tags?post=16718"},{"taxonomy":"entity","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/entities?post=16718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}