SECURITYJul 27 · 23:49 UTCBLEEPING COMPUTERBill Toulas

Hackers target US firms in FastJson RCE zero-day attacks

Hackers are exploiting a vulnerability in the FastJson open-source Java library to launch remote code execution (RCE) attacks against US firms. The attacks allow remote code execution without requiring user interaction or elevated privileges.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

hackerstopicUS firmstopicFastjsontopicRemote Code Execution (RCE)topicZero-day vulnerabilitytopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYJul 25 · 12:52 UTC
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
SECURITYJun 3 · 06:50 UTC
VS Code zero-day lets hackers steal GitHub tokens in one click
SECURITYApr 29 · 20:50 UTC
Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining
SECURITYJun 10 · 13:44 UTC
Microsoft patches Exchange Server zero-day exploited in attacks
SECURITYMay 25 · 09:32 UTC
Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms