Dark Reading
2 years, 8 months ago
Attackers Target Max-Severity Apache ActiveMQ Bug to Drop Ransomware
More than 3,000 systems are exposed and vulnerable to attack on the Internet.
Security news aggregator
Latest coverage for Apache
Apache web servers and related projects matter to cybersecurity because vulnerabilities, configuration errors, and exposed services can enable attacks.
6
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Apache HTTP Server is a widely used open-source web server software that delivers web content by handling client requests over the internet. It supports extensibility through modules that enable features like URL rewriting, authentication, and SSL/TLS encryption. Apache’s configuration flexibility and broad adoption make it a common platform for hosting websites and web applications.
Security risks with Apache often stem from outdated software versions and misconfigurations, which can expose vulnerabilities such as remote code execution, directory traversal, and denial-of-service attacks. Defenders should apply security patches promptly, enable modules like mod_security for web application firewall capabilities, and restrict access permissions carefully. Regular log monitoring is essential to detect suspicious activity, making Apache a critical focus for vulnerability management and web server hardening efforts.
Showing 6 most recent headlines
Filtered view
Dark Reading
2 years, 8 months ago
Attackers Target Max-Severity Apache ActiveMQ Bug to Drop Ransomware
More than 3,000 systems are exposed and vulnerable to attack on the Internet.
The Register
2 years, 8 months ago
Critical Apache ActiveMQ flaw under attack by 'clumsy' ransomware crims
Over a week later and barely any patches for the 10/10 vulnerability have been applied Security researchers have confirmed that ransomware criminals are capitalizing on a maximum-severity vulnerability in Apache ActiveMQ.…
Bleeping Computer
2 years, 8 months ago
HelloKitty ransomware now exploiting Apache ActiveMQ flaw in attacks
A remote code execution (RCE) flaw impacting Apache ActiveMQ has been under active exploitation by threat actors who use HelloKitty ransomware payloads. [...]
The Hacker News
2 years, 8 months ago
HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability
Cybersecurity researchers are warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broker service that could result in remote code execution
Bleeping Computer
2 years, 8 months ago
3,000 Apache ActiveMQ servers vulnerable to RCE attacks exposed online
Over three thousand internet-exposed Apache ActiveMQ servers are vulnerable to a recently disclosed critical remote code execution (RCE) vulnerability. [...]