A critical security vulnerability (CVE-2025-24859) in Apache Roller allows unauthorized access to blog systems after password changes, maintaining active sessions. Scoring a CVSS of 10, the flaw affects versions 1.0.0 through 6.1.4 due to inadequate session management. Users are advised to update to version 6.1.5 immediately and implement protective measures in the meantime.

UK telecom provider Colt says outages were due to cyber incident – The Record from Recorded Future News
UK telecom provider Colt says outages were due to cyber incident The Record from Recorded Future News