ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

A security bulletin on threats spanning hybrid botnets, decade-old exploits, fraud losses, and AI-enabled attacks.

• •Phorpiex's Twizt botnet uses hybrid C2+P2P over TCP/UDP, averaging 125,000 daily infections across Iran, Uzbekistan, and China
• •Apache ActiveMQ CVE-2026-34197 (CVSS 8.8) allows RCE via Jolokia API, chainable with CVE-2024-32114 for unauthenticated access on versions 6.0.0-6.1.1
• •2025 cyber fraud losses topped $17.7B, with $7.2B from cryptocurrency investment scams
• •DDoS-for-hire platforms now embed dark-web LLMs, enabling unskilled actors to run multi-vector campaigns

This summary was automatically generated by AI based on the original article and may not be fully accurate.