Breaking News

It did not take lengthy for hackers to weaponize a vital Java vulnerability for benefit. The use of the Log4J exploit, an unidentified actor controlled to strive against keep watch over of HP’s AMD-based 9000 EPYC servers, turning the tough {hardware} into cryptocurrency miners. The feat provoked a doubling of the hash charge for the CPU-based cryptocurrency Raptoreum (RTM) from 200 MH/s to 400 MH/s sooner than lots of the exploited machines have been introduced offline.

Log4J is a Java vulnerability just lately outed as a part of the well-known Apache suite and merited the highest-possible danger classification (10) below the “CVSS 3.0” tips. It’s because the exploit does not require bodily get right of entry to and lets in for escalation of privileges to trick the device into connecting to, downloading, and working malware from a hacker-controlled server. A number of device suppliers have patched the vulnerability, however that wasn’t the case for HP’s EPYC 9000 machines.

Leave a Reply

Your email address will not be published.

Donate Us