- Published
- Source
- Krebs on Security
- Filed under
- Attacks, Malware & exploits
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.
Keeping malware out
- Keep operating systems, browsers and plugins patched – most malware arrives through known holes.
- Block macros and scripts from the internet, and let only approved software run where you can.
- Watch endpoint alerts for new persistence: scheduled tasks, services and run keys.
More helpNCSC: mitigating malware and ransomware attacks (opens in a new tab)
Defender’s notebook
The attacker technique behind this story, in MITRE’s terms – and what to check in your own estate.
Exploit Public-Facing Application
Initial AccessWhat a defender checks
- Find every internet-facing instance of the affected product.
- Patch, or apply the vendor's mitigation now – CISA's KEV list gives a deadline.
- Look for signs it was exploited before you patched: web shells, new accounts, odd outbound traffic.
Build the skillBlue Team Analyst · Vulnerability Management
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
MyCyberWay training
Blue Team Analyst · Vulnerability Management
You can't patch everything at once. Learn what to fix first.
In our Blue Team Analyst programme you run a vulnerability scan, prioritise the output with CVSS, EPSS and asset criticality, and track remediation to closure with the teams who own the fix.
- Read scanner output properly
- Prioritise with CVSS, EPSS and asset criticality
- Track remediation to closure
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
