Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Multiple Apache HTTP Server Flaws Fixed in Ubuntu
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server (apache2). These vulnerabilities could potent…
Debian LTS: DLA-3818-1: apache2 Security Advisory Updates
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in HTTP response splitting, denial of service, or authorization bypas…
CISA Warns of Actively Exploited Apache Flink Security Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting Apache Flink, an open-source, unified stream-proce…
Apache Cordova App Harness Targeted in Dependency Confusion Attack
Researchers have identified a dependency confusion vulnerability impacting an archived Apache project called Cordova App Harness.Dependency confusion attacks t…
Mageia 2024-0118: apache security update
Apache has been updated to version 2.4.59 to fix CVE-2024-27316, CVE-2024-24795 and CVE-2023-38709. CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by memory ex…
Fedora 39: apache-commons-configuration 2024-fa7b758114
This update contains security fixes for CVE-2024-29131 and CVE-2024-29133. See https://github.com/apache/commons-configuration/blob/master/RELEASE- NOTES.txt f…
Fedora 40: apache-commons-configuration 2024-c673517dce
This update contains security fixes for CVE-2024-29131 and CVE-2024-29133. See https://github.com/apache/commons-configuration/blob/master/RELEASE- NOTES.txt f…
Fedora 40 apache-commons-parent High Type Confusion CVE-2024-1938
The Fedora update for apache-commons-parent includes changes to the system JDK, security releases addressing type confusion vulnerabilities in V8, and various …
New DDoS Malware Puts Apache Servers at Risk
A Lucifer DDoS botnet malware variant has been identified, specifically targeting Apache Hadoop and Apache Druid servers. This sophisticated malware campaign e…
Gentoo: GLSA-202402-16: Apache Log4j: Multiple Vulnerabilities
Multiple vulnerabilities have been discovered in Apache Log4j, the worst of which can lead to remote code execution.
SUSE: 2024:371-1 bci/php-apache Security Update
The container bci/php-apache was updated. The following patches have been included in this update:
Ubuntu 6596-1: Apache::Session::LDAP vulnerability
Apache::Session::LDAP could be made to expose sensitive information through spoofing if it received invalid X.509 certificate.
Gentoo: GLSA-202401-26: Apache XML-RPC: Multiple Vulnerabilities
Multiple vulnerabilities have been found in Apache XML-RPC, the worst of which could result in arbitrary code execution.
New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems
Cybersecurity researchers have developed a proof-of-concept (PoC) code that exploits a recently disclosed critical flaw in the Apache OfBiz open-source Enterpr…
CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe , D-Link, Joomla Under Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evid…
CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe, D-Link, Joomla Under Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evid…
Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack
A new zero-day security flaw has been discovered in Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system that could be exploited to bypass au…
New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now
Apache has released a security advisory warning of a critical security flaw in the Struts 2 open-source web application framework that could result in remote c…
GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability
The recently disclosed critical security flaw impacting Apache ActiveMQ is being actively exploited by threat actors to distribute a new Go-based botnet called…
Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits
The Kinsing threat actors are actively exploiting a critical security flaw in vulnerable Apache ActiveMQ servers to infect Linux systems with cryptocurrency mi…
Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws
Multiple ransomware groups have begun to actively exploit recently disclosed flaws in Atlassian Confluence and Apache ActiveMQ.Cybersecurity firm Rapid7saidit …
HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability
Cybersecurity researchers are warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broke…
SUSE: 2023:2910-1 bci/php-apache Security Update
The container bci/php-apache was updated. The following patches have been included in this update:
Gentoo: GLSA-202309-01: Apache HTTPD: Multiple Vulnerabilities
Multiple vulnerabilities have been discovered in Apache HTTPD, the worst of which could result in denial of service.