https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Apache.Sun, 26 Jul 2026 22:32:51 GMThttps://tenable.com/blog/how-much-cyber-risk-does-ai-create-for-organizations-457-million-security-issues-heres-whatcst-382Tenable detected 457 million AI-related security issues across over 7,000 organizations during a 30-day period, averaging 62,000 exposures per organization. These issues stem primarily from misconfigurations and unmanaged dependencies rather than traditional CVEs, and organizations continue to struggle with patching known vulnerabilities, with median time-to-patch increasing to 43 days. Security teams need to shift from CVE-focused approaches to comprehensive exposure management using automated workflows and AI-driven tools to address the full attack surface.Wed, 24 Jun 2026 13:00:00 GMThttps://labs.watchtowr.com/thanks-itsms-threat-actors-have-never-been-so-organized-bmc-footprints-pre-auth-remote-code-execution-chainscst-563watchTowr Labs discovered four chained vulnerabilities in BMC FootPrints ITSM solution, including authentication bypass, server-side request forgery, and deserialization flaws that enable pre-authenticated remote code execution. The vulnerabilities affect BMC FootPrints versions 20.20.02 through 20.24.01.001, and disclosure to BMC began in June 2025. ITSM solutions like FootPrints are high-value targets because they manage IT inventory, configuration data, and incident information that organized threat actors leverage for ransomware campaigns.Wed, 18 Mar 2026 10:02:49 GMThttps://thedfirreport.com/2026/02/23/apache-activemq-exploit-leads-to-lockbit-ransomwarecst-577A threat actor exploited CVE-2023-46604 on an exposed Apache ActiveMQ server in mid-February 2024 to achieve remote code execution using a Java Spring class, leading to LockBit ransomware deployment. The intrusion demonstrates how unpatched critical vulnerabilities in internet-facing services remain an effective attack vector for ransomware operators.Mon, 23 Feb 2026 14:09:43 GMThttps://greynoise.io/blog/active-exploitation-critical-apache-tomcat-rce-vulnerability-cve-2025-24813cst-1911GreyNoise has detected active exploitation of CVE-2025-24813, a critical remote code execution vulnerability in Apache Tomcat, with multiple IP addresses conducting attacks across several regions. The vulnerability allows attackers to execute arbitrary code on affected Tomcat servers.Thu, 20 Mar 2025 00:00:00 GMThttps://huntress.com/blog/critical-vulnerability-exploitation-of-apache-activemq-cve-2023-46604cst-1025CVE-2023-46604 is a critical remote code execution vulnerability affecting Apache ActiveMQ that is being actively exploited in the wild. Organizations running affected versions should apply patches immediately to prevent unauthorized code execution.Thu, 02 Nov 2023 00:00:00 GMThttps://huntress.com/blog/rapid-response-critical-rce-vulnerability-is-affecting-javacst-1161Huntress released analysis of CVE-2021-44228, a critical remote code execution vulnerability in the Java logging library Log4j that enables unauthenticated attackers to execute arbitrary code on affected systems.Fri, 10 Dec 2021 00:00:00 GMT