GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

September 6, 2024 at 11:45AM A critical security flaw (CVE-2024-36401, CVSS 9.8) in OSGeo GeoServer GeoTools has been exploited in campaigns distributing cryptocurrency miners, botnet malware, and the SideWalk backdoor. The attacks target IT providers in India, U.S. tech firms, Belgian government entities, and telecom companies in Thailand and Brazil. CISA and Fortinet have detected … Read more