TLDR Tech / InfoSec
Weaver E-cology Critical Bug Exploited In Attacks Since March
Researchers at threat intel company Vega report that threat actors are exploiting an unauthenticated remote code execution (RCE) vulnerability in the Weaver E-colony enterprise automation software. The vulnerability is caused by an exposed debug API endpoint that improperly allows user-supplied parameters to reach backend RPC functionality without requiring authentication. Users are recommended to upgrade to the latest version as no other workaround exists.
Read the full story