RONDODOX BOTNET MALWARE NOW HACKS SERVERS USING XWIKI FLAW

Summary from the TLDR InfoSec newsletter

The RondoDox botnet is exploiting a flaw in the XWiki SolrSearch endpoint, using crafted HTTP GET requests to inject base64-encoded Groovy payloads that download and execute malware. The campaign appears to reuse previously identified infrastructure, meaning existing IOC blocklists should effectively mitigate the threat.