The Exploit Post

Sign in Subscribe

Red Dog Security

Dutch Police Confiscate 250 Servers from "Bulletproof" Hosting Provider

Dutch Police Confiscate 250 Servers from "Bulletproof" Hosting Provider

Dutch police have executed a large-scale operation against an unnamed "bulletproof" hosting provider, seizing approximately 250 physical servers from data centers in The Hague and Zoetermeer. The seizure caused thousands of virtual servers to go offline simultaneously. Media sources indicate the operation likely targeted the hosting service CrazyRDP.

Azure Withstands 15.72 Tbps DDoS Attack From Half-Million Compromised Devices

Azure Withstands 15.72 Tbps DDoS Attack From Half-Million Compromised Devices

Microsoft's Azure cloud platform absorbed a massive distributed denial-of-service attack from the Aisuru botnet, peaking at 15.72 terabits per second with traffic originating simultaneously from 500,000 IP addresses. The Attack The assault targeted a specific Azure public IP address in Australia using UDP flooding techniques. Attack

(Untitled)

(Untitled)

Keenetic router users discovered their devices automatically installed new firmware—even with auto-update disabled—after the manufacturer detected active exploitation of a critical authentication vulnerability. The Vulnerability In early November, Keenetic published security bulletin KEN-PSA-2025-WP01 describing a CWE-521 vulnerability (Weak Password Requirements) with a CVSS score of 8.8. The

Google Retreats on Android App Verification After Developer Backlash

Google Retreats on Android App Verification After Developer Backlash

Google reversed course on mandatory developer verification for sideloaded Android apps, announcing simplified accounts for small developers and an "advanced mode" for experienced users following community outcry over the restrictive policy. The Original Plan In August 2025, Google announced a Developer Verification system scheduled for 2026 rollout. The

Fortinet Discloses Critical FortiWeb Zero-Day After Weeks of Active Exploitation

Fortinet Discloses Critical FortiWeb Zero-Day After Weeks of Active Exploitation

Fortinet acknowledged a critical authentication bypass vulnerability in FortiWeb firewalls only after security researchers published proof-of-concept exploits—nearly six weeks after attacks began and three weeks after the company quietly patched the flaw. Timeline of Disclosure Failure The vulnerability's exploitation timeline reveals a problematic gap between patch availability

Security Experts Challenge Anthropic's Claims About AI-Powered Cyber Espionage Campaign

Security Experts Challenge Anthropic's Claims About AI-Powered Cyber Espionage Campaign

The Claims Last week, Anthropic published a report asserting that Chinese threat actor GTG-1002 conducted a large-scale cyber-espionage operation with unprecedented AI automation. According to the company, hackers targeted 30 organizations across technology, finance, chemical manufacturing, and government sectors in September 2025, successfully compromising several victims. The report described what

Checkout Refuses Ransom Demand, Will Donate to Cybercrime Research Instead

Checkout Refuses Ransom Demand, Will Donate to Cybercrime Research Instead

British fintech giant Checkout.com—payment processor for eBay, Uber Eats, IKEA, Samsung, and dozens of major brands—became the latest victim of ShinyHunters hackers. The company refused to pay the ransom and announced plans to donate the demanded amount to cybersecurity research. The Breach Checkout.com provides unified payment