Information security
fromTheregister
1 day agoCISA tells feds to patch 13-year-old Apache ActiveMQ bug
CISA warns of a critical Apache ActiveMQ vulnerability requiring federal agencies to patch within two weeks to prevent exploitation.
Threat actors have been exploiting a maximum-severity vulnerability in Apache ActiveMQ, CVE-2023-46604, since its discovery in October 2023, allowing remote code execution.