Apache – Computer Security Articles

Log4Text is a recently found vulnerability in Apache Commons. Log4Text provoked a knee jerk reaction because it reminds us of Log4Shell. So should we worry?

(Read more…)

The post Why Log4Text is not another Log4Shell appeared first on Malwarebytes Labs.

QuickHeal Security

CVE-2021-44228: New Apache Log4j ‘Log4Shell’ Zero-Day Being Exploited in the Wild

February 2, 2022 admin #log4 shell, #zeroday, Apache, cybersecurity, log4j, Vulnerability

Credit to Author: Quickheal| Date: Wed, 15 Dec 2021 10:34:59 +0000

A critical zero-day vulnerability (CVE-2021-44228) recently discovered Apache Log4J, the popular java open source logging library used in…

The post CVE-2021-44228: New Apache Log4j ‘Log4Shell’ Zero-Day Being Exploited in the Wild appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

Independent Krebs

What We Can Learn from the Capital One Hack

August 2, 2019 admin A Little Sunshine, Apache, Capital One breach, CloudFlare, data breaches, DisruptOPS, Evan Johnson, metadata service, ModSecurity, Rich Mogull, Server Side Request Forgery, SSRF, The Coming Storm, WAF, Web Application Firewall, William Bengston

Credit to Author: BrianKrebs| Date: Fri, 02 Aug 2019 21:30:34 +0000

On Monday, a former Amazon employee was arrested and charged with stealing more than 100 million consumer applications for credit from Capital One. Since then, many have speculated the breach was perhaps the result of a previously unknown “zero-day” flaw, or an “insider” attack in which the accused took advantage of access surreptitiously obtained from her former employer. But new information indicates the methods she deployed have been well understood for years.

Security Sophos

Worms deliver cryptomining malware to web servers

May 30, 2019 admin Apache, Cryptojacking, cryptomining, Neutrino, Rat, Server, SophosLabs Uncut, Tomcat2, worm

Credit to Author: Vikas Singh| Date: Thu, 30 May 2019 13:00:08 +0000

An automated attack, targeting poorly-protected Apache Tomcat servers, turns enterprise hardware into a high-end cryptominer<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/NXX1H4BUrTk” height=”1″ width=”1″ alt=””/>

QuickHeal Security

CVE-2017-5638 – Apache Struts 2 Remote Code Execution Vulnerability

March 29, 2017 admin Apache, CVE, Hacker, hacking, malware, Vulnerability, Zero-Day

Credit to Author: Pradeep Kulkarni| Date: Tue, 14 Mar 2017 11:01:23 +0000

The well-known open source web application framework Apache Struts 2 is being actively exploited in the wild allowing hackers to launch a remote code execution attack. To address this issue, Apache has issued a security advisory and CVE-2017-5638 has been assigned to it. The zero-day bug has been rated with…

The post CVE-2017-5638 – Apache Struts 2 Remote Code Execution Vulnerability appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.