SecurityWeek reports that threat actors have exploited a critical arbitrary code execution flaw in the widely used open source enterprise wiki software platform XWiki, tracked as CVE-2025-24893, to facilitate a cryptomining operation.
Cryptomining operation underpinned by critical XWiki exploit