Over 3,000 internet-connected Apache ActiveMQ servers are exposed to a critical remote code execution vulnerability, tracked as CVE-2023-46604. The vulnerability has been actively exploited to deliver ransomware. To avoid these attacks, the Apache Software Foundation has recommended that organizations update to the latest fixed version of the software. The ActiveMQ serves as the most commonly-used open-source, multi-protocol and java-based message broker, with around 13,120 companies using the system according to Enlyft.
Hackers Leverage AI-Powered Tools to Streamline Active Directory Compromise
A threat campaign in which attackers leveraged AI-powered tools to streamline Active Directory (AD) compromise and accelerate endpoint detection and response (EDR) evasion testing. The
