CVE-2023-46604: Critical RCE in Apache ActiveMQ Exploited by Kinsing Malware
The critical CVE-2023-46604 flaw in Apache ActiveMQ allows remote code execution, exploited to deploy malware like the Kinsing crypto miner.
Ivanti VPN Zero-Day Exploits: CVE-2023-46805 & CVE-2024-21887
Two Ivanti VPN zero-days enable remote code execution; Volexity links the attacks to UTA0178 and urges urgent patching and forensic investigation.
The Log4Shell Vulnerability
Log4Shell (CVE-2021-44228) is a critical flaw in Log4j 2 allowing remote code execution, affecting millions of systems worldwide.
