@shadowserver.bsky.social on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

The Shadowserver Foundation

shadowserver.bsky.social

did:plc:3xyh2kw5hfxsax4zff3pp5ub

We are sharing Fortinet FortiWeb instances compromised with webshells likely via CVE-2025-25257. We see 77 cases on 2025-07-15, down from 85 on 2025-07-14. CVE-2025-25257 exploitation activity observed since Jul 11th. Tree map overview (compromised): https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=other_value&day=2025-07-15&source=compromised_iot&source=compromised_website&source=compromised_website6&tag=fortiweb-compromised%2B&data_set=count&scale=log&auto_update=on

2025-07-16T09:02:34.736Z