In Other News: X Fined €120 Million, Array Flaw Exploited, New Iranian Backdoor

SecurityWeek reports that X has been fined €120 million by The European Commission for disinformation under the Digital Services Act, a penalty described as a fine for failures to handle disinformation and influence operations.

In other news, Japan’s JPCERT/CC warned that a vulnerability affecting Array Networks’ AG secure access gateways, a command injection flaw that does not yet have a CVE identifier, has been exploited in attacks and was patched in May 2025 with ArrayOS AG 9.4.5.9; evidence suggests exploitation against users in Japan since August 2025, with the impacted product being prevalent in Asia.

The publication also notes that the Iranian cyberespionage group MuddyWater has developed a new backdoor named MuddyViper, observed in attacks aimed at Israel with at least one victim in Egypt, representing a more focused and sophisticated operation compared with prior activity. These items underscore ongoing disinformation enforcement actions, software supply chain and gateway vulnerabilities, and evolving nation‑state tradecraft in cyber espionage.