Our mission is to make the Internet more secure by bringing to light vulnerabilities, malicious activity and emerging threats. Join our Alliance!

Global
Joined March 2009
The Shadowserver Foundation retweeted
Using ELK & interested in automating ingestion of our threat intel for your network/constituency via our API? We have introduced an ECS logging script for our intelligence reports. This script uses Redis to queue events for Logstash. Check it out at github.com/The-Shadowserver-…
1
14
57
14,959
The Shadowserver Foundation retweeted
We are scanning & reporting F5 BIG-IP APM CVE-2025-53521 instances thanks to collaboration with the @ncsc_nl SRT. 10 months after vuln disclosure, we still see over 850 IPs vulnerable to potential RCE. Top affected: US with 199 & Japan 182. IP data in Vulnerable HTTP reporting.
2
7
1
11
3,354
The Shadowserver Foundation retweeted
Excited to announce our Central and Eastern Europe (CEE) Critical Community Infrastructure (CCI) Project, focused on improving the #cybersecurity of essential public-serving organizations (made possible with support from @Googleorg) Find out more: shadowserver.org/news/shadow…
4
8
1,719
The Shadowserver Foundation retweeted
On the THREATCON1 Podcast, Piotr Kijewski (@Shadowserver) breaks down AI-generated vuln reports, fake exploits and “research” that fails in the real world. Could AI misinformation become its own threat vector? Watch: youtube.com/watch?v=2E1Tn1zh… Listen: podcasts.apple.com/us/podcas…
4
5
1,247
The Shadowserver Foundation retweeted
Attention! cPanel/WHM CVE-2026-41940 attacks ongoing, with at least 44K IPs likely compromised & seen scanning our honeypots on 2026-04-30. Follow latest guidance to track for compromise & patch: support.cpanel.net/hc/en-us/… See Public Dashboard for stats: dashboard.shadowserver.org/s…
1
15
5
38
12,006
The Shadowserver Foundation retweeted
At #iWeek2026, Andy Chadwick from @Shadowserver joined us to share how their nonprofit foundation provides world-class threat intelligence at no cost to network operators and ISPs.
1
2
3
994
The Shadowserver Foundation retweeted
Scan results for n8n CVE-2026-21858 (CVSS 10.0 RCE) for 2026-01-09: 105,753 vulnerable instances by unique IP found - out of 230,562 IPs with n8n we see that day. Dashboard Tree Map view: dashboard.shadowserver.org/s… IP data in Vulnerable HTTP reports: shadowserver.org/what-we-do/…
2
10
1
26
5,941
The Shadowserver Foundation retweeted
React Server Components (CVE-2025-55182) RCE findings so far on 2025-12-05. 77664 IPs found vulnerable (based on @assetnote methodology). IP data is being shared in our Vulnerable HTTP reports: shadowserver.org/what-we-do/… Dashboard geo breakdown: dashboard.shadowserver.org/s…
3
43
6
174
32,130
The Shadowserver Foundation retweeted
Proud to support #OperationEndgame 3.0! Our partner @Shadowserver helped uncover 86M stolen data items from 525K victims across 226 countries, disrupting cybercrime at scale #CyberSecurity #BotnetTakedown 🌐
Proud to once again support our LE partners in Operation Endgame Season 3 86M stolen data items from 525K victim IPs across 226 countries included in our new Rhadamanthys Historic Bot Victims Special Report, run overnight 2025-11-12 More details: shadowserver.org/news/rhadam…
2
4
2,295
The Shadowserver Foundation retweeted
Alert: SharePoint CVE-2025-53770 incidents! In collaboration with @eyesecurity & @watchtowrcyber we are notifying compromised parties. Read: research.eye.security/sharep… ~9300 Sharepoint IPs seen exposed daily (just population, no vulnerability assessment): dashboard.shadowserver.org/s…
6
57
9
140
30,153
The Shadowserver Foundation retweeted
🚨 BREAKING 🚨 Supported by @Shadowserver, the @Europol-led Operation Eastwood dismantles pro-Russian cybercrime group ‘NoName057(16), behind DDoS attacks on Ukraine 🇺🇦 and allies. 🔒 100+ systems shut down 👮‍♀️ Arrests in 🇫🇷&🇪🇸 🎯 6 Russian nationals wanted
Proud to support our international LE partners in @Europol /@Eurojust coordinated Operation Eastwood - another successful public/private partnership cyber threat disruption!
10
14
2,252
The Shadowserver Foundation retweeted
🇬🇧 Cyber Resilience Programmes joined #OpSerengeti2 kick-off in Seychelles with @INTERPOL_Cyber, @AFRIPOLOfficial & @Shadowserver. 🎯 Focus: High-impact cyber threats in Africa incl. BEC, phishing, DDoS & darknet crime. #Cybercrime
Operation Serengeti 2.0 kicks off in Seychelles! #INTERPOL, African nations & global partners unite to fight cybercrime through stronger regional cooperation, strategic planning, capacity building & intelligence sharing - a bold step for Africa’s digital security. #AFJOC #FCDO
7
8
2,254
The Shadowserver Foundation retweeted
🌐 @OEA_Cyber llevó a cabo la Reunión Regional de Comunidades de Ciberseguridad en América Latina y el Caribe, junto a @Shadowserver, @FIRSTdotOrg, @lacnic, @ITU, y @CCNCERT en el marco de las Jornadas #STICPANAMÁ

🤝 Un espacio clave para alinear esfuerzos, identificar desafíos comunes y fortalecer la colaboración regional.

Como actor de articulación estratégica, desde #CSIRTAmericas seguimos apostando por la cooperación como pilar de la resiliencia digital en las Américas.
#Ciberseguridad #CooperaciónRegional
2
10
1,552
The Shadowserver Foundation retweeted
CERT.LV un @Shadowserver – veiksmīga sadarbība jaunā kvalitātē! 🌐🤝 Esam kļuvuši par Shadowserver “Bronze Tier” partneri! Tas ir vēl viens mērķtiecīgs solis, lai stiprinātu kiberdrošību Latvijā un veicinātu globālo sadarbību. 🛡️🇱🇻
We’re excited to announce that @certlv (CERT.LV - National CSIRT of Latvia) has joined the Shadowserver Alliance as a Bronze Tier Partner! Together we will raise the bar on cybersecurity. Read more about CERT.LV: cert.lv/en/
6
11
2,463
The Shadowserver Foundation retweeted
In the #cybersecurity session at #WACREN2025, panel members shared rich perspectives and agreed on the nexus and cooperation needed between nCSIRTs, NREN #CSIRTs, academic institutions and policymakers and every player in-between. #TrustBrokerAfrica is well positioned to enable this as articulated by @OmoOaiya. Thanks to @CsirtOpen (Don Stikvoort), @ecowas_cedeao (Folake Olagunju), @Shadowserver (Piotr Kijewski), @NRD__CS (Dr. Vilius Benetis) and CINERI 🇸🇳for joining the panel.
3
13
1,321
The Shadowserver Foundation retweeted
📣 We have exciting news to share! Identity Digital has joined the @Shadowserver Foundation to combat malicious activity and neutralize emerging threats. This partnership represents a decisive step forward in proactively protecting users from increasingly sophisticated online threats. 🤝🛡️ Learn more: businesswire.com/news/home/2… #cybersecurity #domains
3
1
5
1,373
The Shadowserver Foundation retweeted
Excited to publish our 2024 Highlights of the Year in Review, covering improvements to public benefit services, response to emerging threats/vulnerabilities, reporting to nCSIRTs & system defenders globally, LE support & cyber capacity building efforts shadowserver.org/news/shadow…
1
9
1
16
5,140
The Shadowserver Foundation retweeted
WACREN, @Shadowserver and Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) are collaborating on a project to strengthen Africa’s research & education sector against cyber threats! 🌍🔐 The project will enhance real-time response and catalyse decision-making in NREN and national African #CSIRTs across the WACREN region! More info here - buff.ly/4b8bhHV 🚀 📢 First training at #WACREN2025 in Dakar! Stay tuned! 🔗 #CyberSecurity #Africa
6
1
10
4,126
The Shadowserver Foundation retweeted
We are proud to partner with one of the best cyber defenders, continuing to keep the internet safe for us all and making cybersecurity accessible. @Shadowserver
Excited to publish our 2024 Highlights of the Year in Review, covering improvements to public benefit services, response to emerging threats/vulnerabilities, reporting to nCSIRTs & system defenders globally, LE support & cyber capacity building efforts shadowserver.org/news/shadow…
3
8
2,437