{"uuid": "1f90deb1-2eea-46c1-b3cc-5c86f8c654b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-36401", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/7393", "content": "\u26a0\ufe0f Cyberattacks are shifting gears.\n\n\u279f One crew hijacks GeoServer (CVE-2024-36401) to quietly sell your internet bandwidth.\n\n\u279f Another builds PolarEdge, a 40k-device botnet hidden in firewalls & routers.\n\n\u279f And \u201cGayfemboy\u201d \u2014 a Mirai offshoot \u2014 spreads across industries to fuel DDoS.\n\nDifferent names. Same trend: stealth, scale, and profit.\n\nDetails \u2192 https://thehackernews.com/2025/08/geoserver-exploits-polaredge-and.html", "creation_timestamp": "2025-08-23T07:41:08.000000Z"}