CISA adds critical Apache RocketMQ flaw in KEV catalog

Attacks leveraging a critical Apache RocketMQ flaw, tracked as CVE-2023-33246, to deploy the DreamBus botnet and a Monero miner have prompted the inclusion of the bug in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, according to BleepingComputer.

agency apache attacks bleepingcomputer botnet bug catalog cisa critical cve cybersecurity deploy exploited exploited vulnerabilities flaw inclusion infrastructure infrastructure security kev kev catalog known exploited known exploited vulnerabilities known exploited vulnerabilities catalog miner monero rocketmq security vulnerabilities vulnerability management