Understanding Recent Apache HTTP Server Vulnerabilities Cybersecurity remains a top priority for system administrators and hosting providers. Recently, the Apache HTTP Server faced vulnerabilities that pose significant risks to server security. It's crucial to stay informed about these threats and implement effective measures for malware detection and prevention. Recent Vulnerabilities Overview A recently reported vulnerability, […]

Introduction to CVE-2025-11931 Recent research has unveiled a significant vulnerability known as CVE-2025-11931. This issue is rooted in an integer underflow during the decryption process of the XChaCha20-Poly1305 algorithm. Its implications are serious, particularly for system administrators, hosting providers, and operators of Linux servers. Ultimately, this vulnerability could lead to out-of-bounds access and present risks […]

Understanding Recent Apache HTTP Server Vulnerabilities Cybersecurity remains a top priority for system administrators and hosting providers. Recently, the Apache HTTP Server faced vulnerabilities that pose significant risks to server security. It's crucial to stay informed about these threats and implement effective measures for malware detection and prevention. Recent Vulnerabilities Overview A recently reported vulnerability, […]

Introduction to CVE-2025-11931 Recent research has unveiled a significant vulnerability known as CVE-2025-11931. This issue is rooted in an integer underflow during the decryption process of the XChaCha20-Poly1305 algorithm. Its implications are serious, particularly for system administrators, hosting providers, and operators of Linux servers. Ultimately, this vulnerability could lead to out-of-bounds access and present risks […]

Aitire is a small MSP (Managed Service Provider) company located in Spain. They have more than 10 years of experience in computer consulting, Free Software, Open Source, GNU / Linux, etc… They aspire every day to maximize their technology and provide the best tools to their clients. Challenges „We usually work with rpm based Linux […]

Our Port Honeypot module proactively catches botnets very quickly, as botnets usually start to scan open ports, which is the first step of the attack cycle. We found an old IoT botnet that became active again. It strangely happened just 2 months after 21-year-old Kenneth Schuchman pleaded guilty to developing and deploying the Satori botnet. […]

On 3 Dec 2019, we released a new agent version (2.6.4) to fix the cert update bug in the SSL Terminating module, but unfortunately, some dependencies caused serious issues (kernel panic, redirection problems) on some CentOS 6 and CentOS 7 servers. It affected only 2% of the BitNinja protected servers because it occurred only in […]

Industry-first feature is available in BitNinja! We are happy to announce that the brand-new ASN white/blacklist option is out now. This development was requested by our users and we are so thankful that our partners are inspiring us to create such special features, which are only available in BitNinja. What does ASN mean? An autonomous […]

RCE attacks are one of the most dangerous types of attacks as hackers could take complete control of the victim’s host, meaning that they can run commands, install malware, etc. In this article, I’d like to introduce 2 new vulnerabilities, which have been patched by BitNinja WAF: vBulletin RCE Rusty Joomla RCE New botnet utilizes […]

It takes 99.9% less memory usage and 99.9% less time to set up… Unbelievable, but it’s possible with the new malware monitoring tool. While BitNinja believes in the power of prevention and our proactive modules are very robust, we also want to provide an all-in-one server security service. We know that malware infections are a […]

Not everyone uses the BitNinja Dashboard for the same reasons when doing their work. We know that. Which is why we have different sub-user roles built into our Dashboard. Why do you need sub-user roles? If you need your accountant to download your subscriptions’ invoices without sharing your BitNinja account's login details, and if you […]

ReadySpace was founded in 2003 and is based in Singapore. They provide cloud-based solutions to their 150,000 customers, mainly from the Asia Pacific region. They are now expanding to the Philippines and Indonesia, and since 2013 started to open towards American businesses. Challenges They were experiencing the harmful effects of heavy DoS attacks mainly, which […]

BitNinja was founded in 2014 and became very profitable by the following year. We could quickly grow by using our own resources, however, we are truly committed to our mission. We want to make the internet a safer place, so we decided to speed up our growth with investors. We are pleased to announce that […]

Understanding CVE-2025-65107: A Destructive Vulnerability Recently, a significant vulnerability was reported concerning Langfuse, an open-source large language model platform. This vulnerability, identified as CVE-2025-65107, allows potential account takeover through CSRF or phishing attacks. What is CVE-2025-65107? This vulnerability affects versions of Langfuse from 2.95.0 to before 2.95.12 and from 3.17.0 to before 3.131.0. The issue […]

Understanding Vulnerability CVE-2025-65108 The recent CVE-2025-65108 vulnerability highlights the importance of server security. This vulnerability affects the md-to-pdf tool, allowing for arbitrary JavaScript code execution. For system administrators and hosting providers, staying informed is crucial as these vulnerabilities can lead to breaches. What is CVE-2025-65108? md-to-pdf is a CLI tool that converts Markdown files to […]

Introduction to CVE-2025-65109 The recent announcement of CVE-2025-65109 highlights a significant vulnerability in the Minder software supply chain security platform. This flaw impacts both Minder Helm and Minder Go, potentially exposing sensitive URLs. Immediate action is crucial for system administrators and hosting providers. Understanding the Vulnerability CVE-2025-65109 allows users to access content in contexts they […]