In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware

In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware notes that a vulnerability affecting Gladinet’s CentreStack and Triofox products has been exploited in the wild, with Huntress warning that exploitation of CVE-2025-11371 has been detected after earlier activity around CVE-2025-30406. Gladinet is providing a workaround while a patch is developed, according to Huntress.

The roundup also reports on a honeypot simulating a water treatment plant that attracted activity linked to Russia and Iran, with a Russia-linked group named TwoNet attempting defacement and disruption, per Forescout.

ClayRat Android spyware, detailed by Zimperium, targets Russian users and is distributed through Telegram channels and phishing sites posing as apps such as WhatsApp, TikTok and YouTube; the malware can steal SMS messages, notifications and call logs, take photos, and send messages or make calls from the device. This update was published on 10 October 2025.