A surge in Server-Side Request Forgery (SSRF) exploitation has been detected, impacting organizations globally since March 9, 2025. Around 400 IP addresses are targeting multiple SSRF-related vulnerabilities, indicating a coordinated, automated campaign. This systematic approach highlights significant risks, especially in cloud environments. Organizations should patch affected systems and enhance security measures to mitigate these threats.
Thousands Of Vulnerable TP-Link Routers Targeted By Ballista Botnet
The Ballista botnet has compromised over 6000 TP-Link Archer AX-21 routers through a high-severity remote code execution flaw, according to The Hacker News. The botnet,
