CISA: Attackers Breach Federal Agency via Critical GeoServer Flaw
CISA: Attackers Breach Federal Agency via Critical GeoServer Flaw Summary On 11 July 2024 threat actors exploited a critical remote-code-execution flaw (CVE-2024-36401) in GeoServer to breach a large, unnamed federal civilian executive branch (FCEB) agency. CISA responded after the agency’s EDR flagged activity, but found the agency’s incident response playbook, patching and telemetry access were […]