Apache has issued another patch for a vulnerability in Struts 2 framework for Java applications as the one issued in 2020 did not quite work. Apache says 2-year-old Struts bug wasn’t fully fixed • The Register S2-062 – Apache Struts 2 Wiki – Apache Software Foundation
Are your patches and updates being done everywhere?
Patch Tuesday has come around again – and time for you check that ALL your updates and patches are up to date – not just your Microsoft ones. I know they are supposed to happen automatically but check anyway! Microsoft April 2022 Patch Tuesday – Sans Internet Storm Centre Microsoft’s …
Continue reading “Are your patches and updates being done everywhere?”
Spring4Shell in the wild executing the Mirai botnet
Hackers have been actively working to exploit the Spring4Shell vulnerability – now it has been detected in the wild deploying the Mirai botnet. Spring4Shell under active exploit by Mirai botnet herders • The Register CVE-2022-22965 Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware (trendmicro.com) …
Continue reading “Spring4Shell in the wild executing the Mirai botnet”
Will this be a more strict Google Play store?
Apple has always promoted it’s App Store as a safe a secure place to download apps to your iOS device because of the level of curation (and fees) they apply to any app available there. Google on the other hand, still charges the fees to developers, but there was always …
Continue reading “Will this be a more strict Google Play store?”
National Cyber Security Centre Threat Report 8 April 2022
Weekly Threat Report 8th April 2022 – NCSC.GOV.UK