Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security


The State Service of Special Communications and Information Protection (SSSCIP) of Ukraine acknowledged that the powerful assault on Ukrtelecom had been defeated, but that networks had been disrupted.

The SSCIP posted on Twitter that Ukrtelecom has temporarily curtailed its services to the majority of civilian users and commercial clients in order to preserve its network infrastructure and continue delivering services to Ukraine’s Armed Forces and other military organisations, as well as to customers.

Read More…