Construction Firms Targeted via mJobTime Vulnerability Using MSSQL & IIS POST Exploits

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Construction Firms Targeted via mJobTime Vulnerability Using MSSQL & IIS Exploits Construction companies are facing active attacks that exploit a critical SQL injection vulnerability in the Mjobtime application, a widely used labor time-tracking tool. The attacks utilize MSSQL and IIS POST request methods, targeting Mjobtime version 15.7.2. This vulnerability poses significant risks to the affected firms operating in the construction sector. 2 sources 36