Tag: apache
-
Top 5 CVEs and Vulnerabilities of May 2024
May brought a fresh batch of security headaches. This month, we’re focusing on critical vulnerabilities in widely used software like Apache, Gitlab, a… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/top-5-cves-and-vulnerabilities-of-may-2024/
-
Three-Year-Old Apache Flink Flaw Under Active Attack
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35922/Three-Year-Old-Apache-Flink-Flaw-Under-Active-Attack.html
-
CISA adds years-old Apache Flink bug to KEV catalog
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cisa-adds-years-old-apache-flink-bug-to-kev-catalog
-
Kinsing Malware Attacking Apache Tomcat Server With Vulnerabilities
The scalability and flexibility of cloud platforms recently boosted the emerging trend of cryptomining attacks in the cloud. Unlike on-premises infras… First seen on gbhackers.com Jump to article: gbhackers.com/kinsing-malware-attacks-apache-tomcat-vulnerabilities/
-
CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog
CISA adds Apache Flink improper access control vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure… First seen on securityaffairs.com Jump to article: securityaffairs.com/163635/security/cisa-apache-flink-flaw-known-exploited-vulnerabilities-catalog.html
-
Kinsing Malware Attacking Apache Tomcat Servers To Deploy Cryptominers
Kinsing malware, known for exploiting vulnerabilities on Linux cloud servers to deploy backdoors and cryptominers, has recently expanded its target to… First seen on gbhackers.com Jump to article: gbhackers.com/kinsing-malware-apache-tomcat-servers/
-
Apache OFBiz RCE Flaw Let Attackers Execute Malicious Code Remotely
Many businesses use enterprise resource planning (ERP) systems like Apache OFBiz. However, it has been found to have significant security holes that l… First seen on gbhackers.com Jump to article: gbhackers.com/apache-ofbiz-rce-flaw/
-
Apache Cordova App Harness Targeted in Dependency Confusion Attack
Researchers have identified a dependency confusion vulnerability impacting an archived Apache project called Cordova App Harness.Dependency confusion … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/apache-cordova-app-harness-targeted-in.html
-
Multiple Apache HTTP Server Vulnerabilities Fixed in Ubuntu
The Ubuntu security team recently addressed several Apache HTTP Server vulnerabilities in Ubuntu 23.10, Ubuntu 23.04, Ubuntu 22.04 LTS, Ubuntu 20.04 L… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/multiple-apache-http-server-vulnerabilities-fixed-in-ubuntu/
-
Dependency confusion vulnerability impacts archived Apache project
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/dependency-confusion-vulnerability-impacts-archived-apache-project
-
Dependency Confusion Vulnerability Found in Apache Project
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/dependency-confusion-flaw-found/
-
Critical Apache HugeGraph Flaw Let Attackers Execute Remote Code
Security researchers have identified a critical vulnerability in Apache HugeGraph, an open-source graph database tool. This flaw, if exploited, could … First seen on gbhackers.com Jump to article: gbhackers.com/critical-apache-hugegraph-flaw/
-
AWS fixes ‘FlowFixation’ vulnerability for account hijacking
A Tenable researcher discovered a session fixation flaw in AWS Managed Workflows for Apache Airflow that, combined with a misconfiguration, could enab… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366574976/AWS-fixes-FlowFixation-vulnerability-for-account-hijacking
-
AWS Patches Critical ‘FlowFixation’ Bug in Airflow Service to Prevent Session Hijacking
Cybersecurity researchers have shared details of a now-patched security vulnerability in Amazon Web Services (AWS) Managed Workflows for Apache Airflo… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/aws-patches-critical-flowfixation-bug.html
-
Session Takeover Bug in AWS Apache Airflow Reveals Larger Cloud Risk
A bug exposed users of an AWS workflow management service to cookie tossing, but behind the scenes lies an even deeper issue that runs across all of t… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/1-click-takeover-bug-aws-apache-airflow-risk
-
One-Click AWS Vulnerability Let Attackers Takeover User’s Web Management Panel
Tenable Research has identified a critical vulnerability within the AWS Managed Workflows for Apache Airflow (MWAA) service, which they have named >>F… First seen on gbhackers.com Jump to article: gbhackers.com/one-click-aws-vulnerability/
-
AWS fixes 1-click Apache Airflow session hijack flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/aws-fixes-1-click-apache-airflow-session-hijack-flaw
-
Vulnerability Allowed Takeover of AWS Apache Airflow Service
AWS patches vulnerability that could have been used to hijack Managed Workflows Apache Airflow (MWAA) sessions via FlowFixation attack. The post hes … First seen on securityweek.com Jump to article: www.securityweek.com/vulnerability-allowed-one-click-takeover-of-aws-service-accounts/
-
1-Click Takeover Bug in AWS Apache Airflow Reveals Larger Risk
A bug exposed users of an AWS workflow management service to cookie tossing, but behind the scenes lies an even deeper issue that runs across all of t… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/1-click-takeover-bug-aws-apache-airflow-risk
-
Vulnerability Allowed One-Click Takeover of AWS Service Accounts
AWS patches vulnerability that could have been used to hijack Managed Workflows Apache Airflow (MWAA) sessions via FlowFixation attack. The post hes … First seen on securityweek.com Jump to article: www.securityweek.com/vulnerability-allowed-one-click-takeover-of-aws-service-accounts/
-
Cloud-y Linux Malware Rains on Apache, Docker, Redis & Confluence
Spinning YARN cyberattackers wielding a Linux webshell are positioning for broader cloud compromise by exploiting common misconfigurations and a known… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/cloud-y-linux-malware-rains-apache-docker-redis-confluence
-
Linux Malware Targets Docker, Apache Hadoop, Redis and Confluence
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/linux-malware-targets-docker/
-
Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining
Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part … First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/hackers-exploit-misconfigured-yarn.html
-
Hackers target Docker, Hadoop, Redis, Confluence with new Golang malware
Hackers are targeting misconfigured servers running Apache Hadoop YARN, Docker, Confluence, or Redis with new Golang-based malware that automates the … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-target-docker-hadoop-redis-confluence-with-new-golang-malware/
-
Attackers Target Max-Severity Apache ActiveMQ Bug to Drop Ransomware
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/attackers-target-max-severity-apache-activemq-bug-to-drop-ransomware
-
New DDoS malware Attacking Apache big-data stack, Hadoop, Druid Servers
Concerning a development for organizations leveraging Apache’s big-data solutions, a new variant of the Lucifer DDoS botnet malware targeting Apache H… First seen on gbhackers.com Jump to article: gbhackers.com/ddos-malware-attacking-apache-servers/
-
‘Lucifer’ Botnet Turns Up the Heat on Apache Hadoop Servers
More than 3,000 unique attacks hitting Hadoop and Druid honeypots in just the past month indicate an attacker testing phase, portending fire and brims… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/lucifer-botnet-heat-apache-hadoop-servers
-
VulnRecap 1/29/24 Apple, Apache VMware Under Attack
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-january-29-2024/
-
Tenable warnt vor Ausnutzung einer Stored XSS-Schwachstelle
Unternehmen sollten Maßnahmen in Bezug auf bereits bereitgestellte Apache-Airflow-Instanzen in ihren AWS- oder GCP-verwalteten Diensten ergreifen, da … First seen on infopoint-security.de Jump to article: www.infopoint-security.de/tenable-warnt-vor-ausnutzung-einer-stored-xss-schwachstelle/a35685/