Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Thursday, 18-Jan-2024 01:22:59 JST Kevin Beaumont

   in reply to

   A bit more on the CVE-2023-50164 hype train - Akamai are seeing same as myself and @shadowserver -

   https://www.akamai.com/blog/security-research/apache-struts-cve-exploitation-attempts

   Rather bafflingly I keep seeing people at security resellers trying to claim this is evidence of "nation state zero days".

   To be super clear about this one, the request below is for a specific Tomcat webapp called 'upload' - the webapp has exactly one function, upload, which is set up to be exploitable by this CVE.