ThreatsDay: Apache OFBiz RCE, DreamHost Breach, and DeFi Site Hijacks
The weekly roundup covers multiple cybersecurity incidents and topics, including patched Apache OFBiz pre-authentication RCE and full account takeover issues, a DreamHost breach that may have exposed FTP/SFTP passwords and webmail session information, and ransomware and fraud activity. It also discusses AI’s effect on zero-day discovery, prolonged patching times for network appliances, a Docker Sandboxes vulnerability, and other security research.
CERT24