Java — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• Operation Escaneo Targets Latin American Critical Infrastructure

  Operation Escaneo is a coordinated cyberattack attributed to the MexicanMafia group, targeting critical infrastructure across Latin America, primarily Mexico. The campaign, which spanned from 2025 to 2026, utilized…

  4 articles · Updated June 18, 2026
• Critical RCE Vulnerability in Oracle PeopleSoft Exploited by SHADOW-AETHER-015

  A pre-authentication remote code execution (RCE) vulnerability, CVE-2026-35273, was discovered in Oracle PeopleSoft PeopleTools, affecting versions 8.61 and 8.62. The vulnerability allows unauthenticated attackers to…

  5 articles · Updated June 18, 2026
• China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware

  A China-linked cyber espionage operation has compromised a Vietnamese public hospital's imaging systems, infiltrated Malaysia's Ministry of Foreign Affairs, and targeted Honduras's National Congress using a new malware…

  2 articles · Updated July 23, 2026
• Spring Framework RCE Vulnerability CVE-2022-22965 Exploited in the Wild

  On March 30, 2022, a zero-day remote code execution vulnerability in the Spring Framework, dubbed 'Spring4Shell' and assigned CVE-2022-22965, was disclosed. This vulnerability affects Spring MVC and Spring WebFlux…

  3 articles · Updated June 17, 2026
• Critical Zero-Day Vulnerabilities in Atlassian Confluence Exploited

  Atlassian Confluence has faced multiple critical vulnerabilities, including CVE-2022-26134 and CVE-2023-22515. CVE-2022-26134, published on June 3, 2022, is an unauthenticated remote code execution vulnerability that…

  3 articles · Updated June 17, 2026
• Active Exploitation of Weaver E-cology RCE Vulnerability CVE-2026-22679

  A critical vulnerability (CVE-2026-22679) in the Weaver E-cology platform is being actively exploited. This unauthenticated remote code execution flaw affects Weaver E-cology 10.0 builds released before March 12, 2026.…

  3 articles · Updated May 5, 2026
• Critical Vulnerability in syracom AG 2FA Plugin for Atlassian Products

  The Secure Login (2FA) plugin for Atlassian Jira, Confluence, and Bitbucket has a serious broken access control vulnerability. This flaw allows attackers with valid user credentials to bypass multi-factor authentication…

  3 articles · Updated June 17, 2026
• Multiple Vulnerabilities Discovered in kerwincui FastBee Software

  Two critical vulnerabilities have been identified in kerwincui FastBee versions up to 1.2.1. CVE-2026-7676 affects the Tool Download Endpoint, allowing path traversal through the fileName argument in the…

  2 articles · Updated May 3, 2026
• Critical Vulnerabilities Discovered in Apache OFBiz Affecting All Versions Pre-24.09.06

  Apache OFBiz has critical vulnerabilities that allow attackers to exploit hardcoded keys and bypass authentication. The vulnerabilities, CVE-2026-31986 and CVE-2026-45434, were published on 2026-05-19 and affect all…

  3 articles · Updated May 21, 2026

Recent Intelligence Reports

• China-Nexus Hackers Breached Hospital X-Rays, Embassy, and Congress With New ... — Techtimes · July 23, 2026
• Google Makes CodeMender Available as Managed AI Security Agent — Infosecurity-Magazine · July 22, 2026
• Mitiga Blog News Jul 16, 2026 What is the Spring4Shell exploit? An overview of the Spring vulnerability mitiga.io Open source — www.mitiga.io · July 17, 2026
• 78 — cwe.mitre.org · July 15, 2026
• Government of Alberta uses Claude to find and fix cybersecurity vulnerabilities — Anthropic · July 6, 2026
• PhonePe Releases Nika, Open-Source Java Microservices Security Tool — Techgig · July 2, 2026
• HeroDevs Expands Legacy Software Security Support With New Open Source Initiative and ... — Tipranks · June 27, 2026
• Chainguard targets Java's unpatched vulnerability backlog with drop — Thenewstack · June 24, 2026

Related Entities