Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0272: apache Security Advisory Updates
CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) SSRF in Apache HTTP Server on Windows with mod_rew…
Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws
Multiple ransomware groups have begun to actively exploit recently disclosed flaws in Atlassian Confluence and Apache ActiveMQ.Cybersecurity firm Rapid7saidit …
HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability
Cybersecurity researchers are warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broke…
Zerobot Malware Now Shooting for Apache Systems
The Zerobot botnet, first detected earlier this month, is expanding the types of Internet of Things (IoT) devices it can compromise by going after Apache syste…
Ubuntu 4380-1: Apache Ant vulnerabili
Apache Ant could leak sensitive information or be made to run programs as your login.
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv eco…
CVE-2023-46604: Critical Threat for Linux Servers Running ActiveMQ
CVE-2023-46604 is not just another box on your patching to-do list''it's a major remote code execution (RCE) vulnerability in Apache ActiveMQ that admins need …
Second Log4j Vulnerability (CVE-2021-45046) Discovered — New Patch Released
UPDATE— The severity score of CVE-2021-45046, originally classified as a DoS bug, has since been revised from 3.7 to 9.0, to reflect the fact that an attacker …
Debian: DSA-5009-1: tomcat9 security upda
Apache Tomcat, the servlet and JSP engine, did not properly release an HTTP upgrade connection for WebSocket connections once the WebSocket connection was clos…
Mageia 2020-0237: ant security upda
Updated ant packages fix security vulnerability: Apache Ant uses the default temporary directory identified by the Java system property java.io.tmpdir for seve…
Mageia 2020-0077: xmlrpc security upda
A flaw was discovered where the XMLRPC client implementation in Apache XMLRPC, performed deserialization of the server-side exception serialized in the faultCa…