A new report reveals a stealthy attack on GeoServer using a critical RCE flaw. Instead of ransomware, attackers are hijacking servers to earn passive income.
CVE-2024-36401
Learn about Earth Baxia's targeted cyber espionage campaign against government organizations in the APAC region, exploiting a critical GeoServer vulnerability.
Stay informed about the latest cybersecurity threat: SideWalk malware targeting critical vulnerability in GeoServer.
Adding to the urgency, the proof-of-concept (PoC) exploit code for CVE-2024-36401 has already been published online.
A severe security flaw, CVE-2024-36401 (CVSS 9.8), has been discovered in GeoServer, a widely-used open-source software platform