SEARCH
Archive
Exploitation Attempts Ramp Up Against Critical Log4j Flaw
While a patch is available from the Apache Software Foundation, researchers say that numerous companies may need to wait until vendors push security updates out to their own products.
Scanning Activity for Apache Flaw Began Before Public Disclosure
Attackers were scanning for CVE-2021-41773 in the Apache web server several days before the flaw was disclosed publicly.
Apache Fixes Web Server Path Traversal Flaw Under Active Attack
Apache has released a fix for a path traversal flaw (CVE-2021-41773) that has been exploited in the wild.
Apache Warns of Serious Flaw in Struts
A vulnerability in Apache Struts (CVE-2019-0230) can lead to remote code execution in some circumstances.
US Charges Chinese PLA Members in Equifax Breach
The Department of Justice indicted four members of China's People's Liberation Army in connection with the Equifax data breach in 2017.