Gitpaste-12 Worm Targets Linux Servers, IoT Devices
The newly discovered malware uses GitHub and Pastebin to house component code, and harbors 12 different initial attack vectors. Continue reading Gitpaste-12 Worm Targets Linux Servers, IoT Devices
Category Archives: CVE-2017-5638
Mirai, Gafgyt Botnets Return to Target Infamous Apache Struts, SonicWall Flaws
By implementing the “Equifax bug,” it’s the first known time a Mirai IoT botnet variant has targeted an Apache Struts vulnerability. Continue reading Mirai, Gafgyt Botnets Return to Target Infamous Apache Struts, SonicWall Flaws
Equifax Hackers Stole 200k Credit Card Accounts in One Fell Swoop
Visa and MasterCard are sending confidential alerts to financial institutions across the United States this week, warning them about more than 200,000 credit cards that were stolen in the epic data breach announced last week at big-three credit bureau Equifax. At first glance, the private notices obtained by KrebsOnSecurity appear to suggest that hackers were first able to steal credit card numbers from Equifax starting in November 2016. But Equifax says the accounts were all stolen at the same time — when hackers accessed the company’s systems in mid-May 2017. Continue reading Equifax Hackers Stole 200k Credit Card Accounts in One Fell Swoop
Patch Released for Critical Apache Struts Bug
The Apache Software Foundation released a patch on Tuesday for a critical vulnerability impacting all versions of Struts since 2008. Continue reading Patch Released for Critical Apache Struts Bug
Apache Attack Traffic Dropping, Limited to Few Sources
While probes looking for vulnerable Apache Struts 2 deployments continue, malicious traffic has tapered off, researchers at Rapid7 said. Continue reading Apache Attack Traffic Dropping, Limited to Few Sources
Attacks Heating Up Against Apache Struts 2 Vulnerability
Apache administrators are urged to immediately upgrade the Struts 2 web application framework to address a remote code execution flaw under public attack. Continue reading Attacks Heating Up Against Apache Struts 2 Vulnerability