Apache has released a fix for a path traversal flaw (CVE-2021-41773) that has been exploited in the wild.
A vulnerability in Apache Struts (CVE-2019-0230) can lead to remote code execution in some circumstances.
The Department of Justice indicted four members of China's People's Liberation Army in connection with the Equifax data breach in 2017.
Apache has fixed a root privilege escalation vulnerability in its popular web server software, which runs on millions of servers.
There is a serious flaw in the file upload component in the Struts 2.3.x framework that can lead to remote code execution on vulnerable apps.