A critical vulnerability (CVE-2025-29953) in Apache ActiveMQ’s NMS OpenWire Client allows remote code execution via unsafe data deserialization. Affecting versions prior to 2.1.1, it poses severe risks. Apache released a fix in version 2.1.1, urging users to upgrade. Evasion of proposed security measures emphasizes the need for strong input validation and zero-trust principles.

‘China has almost doubled their aggression in cyber’: Kevin Mandia and Nicole Perlroth warn organizations aren’t waking up to growing APT threats
Amid state-backed threats and budget cuts affecting cybersecurity teams, experts are advising organizations to monitor their environments more vigilantly. Enhanced vigilance is essential to safeguard