Search: “activemq”

75 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 28 Ransomware 19 Malware 16 Exploit / PoC 11 Threat actor 2 Tools 2 AI tools & infra 1 Research 1 Data breach 1

SeverityAll critical 46 high 21 medium 9 low 3 info 2

CVE-2026-74761: Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId

Apache ActiveMQ CVE-2026-74761: moderate clientId spoofing in RemoveSubscription handling, affecting Broker, All and apache-activemq, fixed in 6.3.2 and 5.19.11.

The Apache ActiveMQ team disclosed CVE-2026-74761, a moderate-severity spoofing issue in the handling of RemoveSubscription clientId. Affected components include ActiveMQ Broker (activemq-broker), ActiveMQ All (activemq-all) and Apache ActiveMQ in versions 6.0.0 before 6.3.2 and 5.x before 5.19.11. The flaw could allow a client to spoof another client's clientId when removing subscriptions. Users should upgrade to the 6.3.2 or 5.19.11 release lines or later.

oss-securitySep 8, 15:48 UTC · 7d agoVulnerability CVE-2026-747611

Attackers exploiting Apache ActiveMQ flaw to deliver ransomware (CVE-2023-46604)

Help Net SecurityNov 21, 11:29 UTC · Nov 21, 2023Ransomware in the wildCVE-2023-46604

Threat actors exploit Apache ActiveMQ flaw to deliver the Godzilla Web Shell

Security AffairsJan 22, 11:19 UTC · Jan 22, 2024Threat actor in the wildCVE-2023-46604

Suspected exploitation of Apache ActiveMQ flaw CVE-2023

Security AffairsNov 2, 13:52 UTC · Nov 2, 2023Ransomware in the wildCVE-2023-46604

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

The Hacker NewsApr 17, 13:10 UTC · Apr 17, 2026Exploit / PoC in the wildCVE-2026-34197 CVE-2024-32114 CVE-2023-46604

HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability

The Hacker NewsNov 4, 04:55 UTC · Nov 4, 2023Ransomware in the wildCVE-2023-46604

Claude helps researcher dig up decade-old Apache ActiveMQ RCE vulnerability (CVE-2026-34197)

Help Net SecurityApr 21, 12:58 UTC · Apr 21, 2026Vulnerability in the wildCVE-2026-34197 CVE-2024-321141

Hackers deploy DripDropper via Apache ActiveMQ flaw, patch systems to evade detection

Security AffairsAug 21, 16:30 UTC · Aug 21, 2025Vulnerability in the wildCVE-2023-46604

Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years

Infosecurity MagazineApr 8, 09:15 UTC · Apr 8, 2026Vulnerability CVE-2026-34197 CVE-2024-321141

U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog

Security AffairsApr 17, 07:39 UTC · Apr 17, 2026Exploit / PoC in the wildCVE-2026-34197

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

The Hacker NewsJan 22, 03:40 UTC · Jan 22, 2024Ransomware in the wildCVE-2023-46604

Apache ActiveMQ bug exploited to deliver Kinsing malware

Help Net SecurityNov 21, 00:00 UTC · Nov 21, 2023Malware CVE-2023-46604 CVE-2023-4911

CVE-2026-67593: Apache Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

CVE-2026-67593: remote attackers can delete ActiveMQ Artemis queues via pre-authentication Openwire protocol handling in affected versions.

A remote attacker can exploit pre-authentication handling of the Openwire protocol to result in queue deletion on affected Apache Artemis and ActiveMQ Artemis brokers. Affected components include artemis-openwire-protocol and artemis-jakarta-openwire-protocol in Apache Artemis 2.50.0 through 2.56.0, and artemis-openwire-protocol 1.0.0 through 2.44.0 plus artemis-jakarta-openwire-protocol 2.32.0 through 2.44.0 in ActiveMQ Artemis. Apache rates the issue important.

oss-securitySep 10, 00:48 UTC · 6d agoVulnerability 7 sources CVE-2026-675931

Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

The Hacker NewsDec 12, 10:06 UTC · Dec 12, 2023Vulnerability in the wildCVE-2023-466041

New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2023Exploit / PoC in the wildCVE-2023-46604

New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installs

Security AffairsJan 31, 11:27 UTC · Jan 31, 2021Vulnerability CVE-2017-10271 CVE-2016-3088

Flaw in Apache ActiveMQ Exposes Linux Systems to Kinsing Malware

Infosecurity MagazineNov 22, 17:00 UTC · Nov 22, 2023Malware in the wildCVE-2023-46604 CVE-2023-4911

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

The Hacker NewsAug 19, 17:37 UTC · Aug 19, 2025Malware CVE-2023-46604

GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability

The Hacker NewsNov 29, 05:11 UTC · Nov 29, 2023Vulnerability in the wildCVE-2023-46604

Week in review: LockBit exploits Citrix Bleed, Apache ActiveMQ bug exploited for cryptojacking

Help Net SecurityNov 26, 00:00 UTC · Nov 26, 2023Ransomware in the wildCVE-2023-4966 CVE-2023-1671 CVE-2023-46604

Cyber experts and officials raise alarms about exploits against Citrix and Apache products

The RecordNov 3, 18:13 UTC · Nov 3, 2023Ransomware in the wildCVE-2023-46604 CVE-2023-4966

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows

Palo Alto Unit 42Mar 24, 08:51 UTC · Mar 24, 2022Ransomware

ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

The Hacker NewsApr 24, 04:36 UTC · Apr 24, 2026Exploit / PoC CVE-2026-27175 CVE-2026-27174 CVE-2025-22952+1 CVEs

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

Help Net SecurityApr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-341971

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year

The Hacker NewsApr 9, 16:23 UTC · Apr 9, 2026Malware CVE-2024-32114 CVE-2026-34197 CVE-2022-416781

ThreatsDay Bulletin: Kali Linux + Claude, Chrome Crash Traps, WinRAR Flaws, LockBit & 15+ Stories

The Hacker NewsFeb 27, 07:41 UTC · Feb 27, 2026Ransomware CVE-2023-46604

⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

The Hacker NewsNov 3, 17:59 UTC · Nov 3, 2025Threat actor CVE-2025-61932 CVE-2025-55315 CVE-2025-10680+18 CVEs1

Attacker “Patches” Vulnerability Post Exploitation to Lock Out Competi

Infosecurity MagazineAug 19, 14:00 UTC · Aug 19, 2025Vulnerability in the wildCVE-2023-46604

CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2024Vulnerability

Siloscape: First Known Malware Targeting Windows Containers to Compromise Cloud Environments

Palo Alto Unit 42Jun 6, 12:35 UTC · Jun 6, 2024Malware1

Cybersecurity experts warn of new vulnerabilities affecting Apple, Atlassian and Fortra products

The RecordJan 23, 21:31 UTC · Jan 23, 2024Vulnerability in the wildCVE-2024-23222 CVE-2024-0204 CVE-2023-22527+2 CVEs

Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws

The Hacker NewsNov 9, 04:35 UTC · Nov 9, 2023Ransomware in the wildCVE-2023-22518 CVE-2023-22515 CVE-2023-46604

Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug

Help Net SecurityNov 5, 00:00 UTC · Nov 5, 2023Vulnerability in the wildCVE-2023-4966 CVE-2023-22518 CVE-2023-46747+2 CVEs

New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers

The Hacker NewsFeb 1, 11:15 UTC · Feb 1, 2021Malware CVE-2016-3088 CVE-2017-10271

Chinese-speaking cybercrime gang Rocke changes tactics

Security AffairsOct 16, 06:55 UTC · Oct 16, 2019Vulnerability CVE-2019-3396 CVE-2016-3088

XBash combines features from ransomware, miners, botnets, and worms

Security AffairsSep 18, 06:40 UTC · Sep 18, 2018Ransomware CVE-2016-3088

Now Available -

Cisco TalosJul 12, 18:45 UTC · Jul 12, 2011AI tools & infra