News on this topic
CISA tells feds to patch 13-year-old Apache ActiveMQ bug under active attack: : Bug hiding in plain sight for over a decade lands on KEV list
theregister.com/2026/04/17/cisa_tells_feds_to_patch/

Similar to This
Previous
CISA orders feds to patch Zyxel flaw exploited for data theft: Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series ...
bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-zyxel-flaw-by-thursday/

Cisco warns of max severity ISE zero-day exploited in attacks: Cisco has released security updates to address a maximum-severity Identity Services Engine ...
bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks/

Cisco patches Secure Email Gateway zero-day exploited in attacks: Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that ...
bleepingcomputer.com/news/security/new-cisco-secure-email-zero-day-exploited-to-execute-commands-as-root/

OpenAI's agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP - ZDNET
zdnet.com/tech/cve-2026-53362-fraggap-linux-kernel-exploit-openai-incident/

CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday: CISA has ordered U.S. government agencies to patch their Citrix NetScaler appliances against an ...
bleepingcomputer.com/news/security/cisa-hackers-now-exploiting-citrix-netscaler-rce-flaw-in-attacks/

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws: The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies ...
bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-langflow-n-central-apache-tomcat-flaws/

CISA urges immediate SharePoint hardening as exploits mount: Three actively exploited SharePoint vulnerabilities have landed in the KEV catalog ...
computerworld.com/article/4197818/cisa-urges-immediate-sharepoint-hardening-as-exploits-mount-2.html

CISA orders feds to patch max severity ColdFusion flaw by Friday: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government ...
bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-max-severity-coldfusion-flaw-by-friday/

CISA orders feds to patch max severity Joomla plugin flaw by Friday: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal ...
bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-max-severity-joomla-plugin-flaw-by-friday/

CISA gives US federal agencies three days to fix a VPN bug under attack by a ransomware gang
techcrunch.com/2026/06/09/cisa-gives-us-federal-agencies-three-days-to-fix-a-vpn-bug-under-attack-by-a-ransomware-gang/

Actively exploited Apache ActiveMQ flaw impacts 6,400 servers: Nonprofit security organization Shadowserver found that over 6,400 Apache ActiveMQ servers exposed ...
bleepingcomputer.com/news/security/actively-exploited-apache-activemq-flaw-impacts-6-400-servers/

Undiscovered for 13 years: Vulnerability discovered using AI endangers thousands of servers - | Golem.de
golem.de/news/deutschland-auf-platz-4-tausende-apache-activemq-instanzen-sind-angreifbar-2604-207808.html

13-year-old bug in ActiveMQ lets hackers remotely execute commands: Security researchers discovered a remote code execution (RCE) vulnerability in Apache ...
bleepingcomputer.com/news/security/13-year-old-bug-in-activemq-lets-hackers-remotely-execute-commands/

Attackers exploited this critical FortiClient EMS bug as a 0-day: : CISA added the flaw to KEV after Fortinet confirmed exploitation in the wild
theregister.com/2026/04/06/forticlient_ems_bug_exploited/

CISA orders feds to patch actively exploited Citrix flaw by Thursday: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government ...
bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-citrix-flaw-by-thursday/

Chinese hackers exploiting Dell zero-day flaw since mid-2024: A suspected Chinese state-backed hacking group has been quietly exploiting a critical Dell security ...
bleepingcomputer.com/news/security/chinese-hackers-exploiting-dell-zero-day-flaw-since-mid-2024/

Critical Cisco UC bug actively exploited: The RCE flaw lets remote attackers gain root on affected systems with no user interaction. Cisco has released multiple ...
computerworld.com/article/4120764/critical-cisco-uc-bug-actively-exploited.html

DripDropper Linux malware cleans up after itself - how it works: This malware will still foul you up; it just doesn't want anyone messing with your servers while ...
zdnet.com/article/dripdropper-linux-malware-cleans-up-after-itself/

Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in
theregister.com/2025/08/19/apache_activemq_patch_malware/

Next
