The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a high-severity Apache ActiveMQ vulnerability as actively exploited in attacks. The flaw remained undetected for 13 years before patching earlier this month.
CISA added the Apache ActiveMQ vulnerability to its Known Exploited Vulnerabilities catalog, indicating attackers have already deployed working exploits in real-world campaigns.
The flaw affects ActiveMQ, a widely-used open-source message broker deployed across enterprises for managing data transmission between applications. Its 13-year window without detection underscores the risks posed by vulnerabilities in critical infrastructure software.
Apache released patches earlier this month after the vulnerability's discovery. Organizations running affected versions face immediate risk and should prioritize updates.
ActiveMQ's prevalence in enterprise environments—including financial services, healthcare, and government sectors—amplifies the threat level. The active exploitation status suggests attackers are scanning networks for unpatched instances.
CISA's catalog listing serves as a formal alert to federal agencies and critical infrastructure operators. The agency typically recommends immediate patching for vulnerabilities with confirmed active exploitation.
The incident highlights a persistent challenge in open-source software security: vulnerabilities can persist undetected for years before discovery, leaving legacy systems exposed. Organizations relying on older versions of widely-used tools face elevated risk during the window between public disclosure and patch deployment.
Administrators should verify their ActiveMQ versions against Apache's security advisory and apply updates immediately. Network monitoring for suspicious ActiveMQ traffic patterns may help identify compromise attempts.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.
Fraudsters are exploiting Microsoft Teams and similar enterprise chat apps to deceive Chinese users into sending large sums of money. The trend has sparked a wave of complaints across the region.