Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604) ยท updates https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 A deserialization flaw in ActiveMQ's Java OpenWire protocol marshaller let anyone who could reach a broker run shell commands on it. Within days of the fix, attackers were deploying HelloKitty ransomware through it. en Thu, 02 Nov 2023 00:00:00 GMT Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604): CISA adds CVE-2023-46604 to the KEV catalog https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604#2023-11-02-bce46cc2 Thu, 02 Nov 2023 00:00:00 GMT critical <p>Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604): CISA adds CVE-2023-46604 to the KEV catalog</p> Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604): Rapid7 reports exploitation in two customer environments, attempting to deploy HelloKitty ransomware https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604#2023-11-01-aef02f0d Wed, 01 Nov 2023 00:00:00 GMT critical <p><a href="https://www.rapid7.com/blog/post/2023/11/01/etr-suspected-exploitation-of-apache-activemq-cve-2023-46604/">Source</a></p> Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604): Apache publishes the CVE-2023-46604 announcement; fixed releases already out https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604 https://pwn.watch/i/apache-activemq-openwire-rce-cve-2023-46604#2023-10-27-f11a341f Fri, 27 Oct 2023 00:00:00 GMT critical <p><a href="https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt">Source</a></p>