CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited.

• Ionut Ilascu
• August 05, 2026
• 11:51 AM
• 1

Brute-force attacks target Apache Tomcat management panels

A coordinated campaign of brute-force attacks using hundreds of unique IP addresses targets Apache Tomcat Manager interfaces exposed online.

• Sergiu Gatlan
• June 11, 2025
• 10:27 AM
• 0

Webinar: The state of shadow AI in 2026 (and how attackers are taking advantage)

AI adoption has exploded, but every new app, integration and extension introduces new threats and risks.

The latest webinar from Push Security uncovers the scale of Shadow AI in the enterprise, how attackers are taking advantage, and what security teams can do about it.

• Push Security Sponsorship

Critical RCE flaw in Apache Tomcat actively exploited in attacks

A critical remote code execution (RCE) vulnerability in Apache Tomcat tracked as CVE-2025-24813 is actively exploited in the wild, enabling attackers to take over servers with a simple PUT request.

• Bill Toulas
• March 17, 2025
• 09:29 AM
• 0

Apache fixes remote code execution bypass in Tomcat web server

Apache has released a security update to address an important vulnerability in Tomcat web server that could lead to an attacker achieving remote code execution.

• Bill Toulas
• December 23, 2024
• 07:33 AM
• 0

New Spring Java framework zero-day allows remote code execution

A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications.

• Lawrence Abrams
• March 30, 2022
• 04:16 PM
• 0