Criminals exploiting a critical vulnerability in open source Apache ActiveMQ middleware are fixing the flaw that allowed them access, after establishing persistence on Linux servers.

This malware will still foul you up; it just doesn't want anyone messing with your servers while it's using you.

An unidentified group used the ActiveMQ flaw to install ransomware at two organizations. Users should upgrade the software.

Researchers have found a cross-site scripting (XSS) flaw in Apache ActiveMQ that could enable a remote attacker with no privileges to launch an array of attacks against visitors to compromised ...