Critical

Hackers target US firms in FastJson RCE zero-day attacks

BleepingComputer

July 27, 2026 at 11:49 PM

Actively Exploited

Overview

Hackers are exploiting a serious vulnerability in the FastJson open-source Java library that allows for remote code execution without needing user interaction or elevated permissions. This puts numerous U.S. companies at risk, as they may be using FastJson in their applications. Researchers have confirmed that the vulnerability is actively being targeted, making it urgent for affected organizations to address the issue. The ability for attackers to execute code remotely without any user action raises significant security concerns, as it could lead to data breaches or system compromises. Companies using this library should take immediate steps to secure their systems and stay updated on any patches or fixes released to mitigate this threat.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: FastJson library
Action Required: Organizations should update to the latest version of FastJson as soon as patches are available and review their systems for any potential vulnerabilities related to this library.
Timeline: Newly disclosed

Original Article Summary

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges. [...]

Impact

FastJson library

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Organizations should update to the latest version of FastJson as soon as patches are available and review their systems for any potential vulnerabilities related to this library.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Zero-day, Vulnerability, RCE.

Read Original Article

Related Coverage

DDoS Attack Hits Norwegian Government Services

Infosecurity Magazine

Norwegian government services faced significant disruptions due to a coordinated Distributed Denial of Service (DDoS) attack. The attack overwhelmed the network infrastructure, affecting various online services that citizens rely on for accessing government resources. While specific agencies impacted have not been detailed, the scale of the attack suggests a serious attempt to disrupt operations. These types of attacks can hinder public services and erode trust in government capabilities. Authorities are likely working to restore normal operations and investigate the source of the attack to prevent future incidents.

Aug 26, 2026

U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability affecting Gitea, an open-source platform, to its Known Exploited Vulnerabilities catalog. This flaw is linked to potential exploits that could compromise the security of Gitea installations. It is vital for organizations using Gitea to address this vulnerability promptly to prevent unauthorized access or data breaches. The inclusion in CISA's catalog indicates that this issue is being actively exploited or poses a significant threat to users. Organizations should prioritize applying security updates and monitoring their systems closely to mitigate risks.

Aug 26, 2026

88 ID Verification Breaches Show the Cost of Collecting Identity Data

Security Affairs

A recent report from Mysterium VPN reveals that 88 breaches involving ID verification have exposed over 2.15 billion records since 2011. These incidents include sensitive information collected for verifying identities or ages, which has often been breached, leaked, or sold on the dark web. This situation raises significant concerns for users and organizations that handle personal data, as the risks associated with collecting such information are becoming increasingly evident. Companies that rely on ID verification must reassess their data protection strategies to safeguard against potential breaches. The sheer volume of exposed records highlights the urgent need for better security measures in handling identity data.

Aug 26, 2026

Interpol's Jackal IV Disrupts West African Crime Infrastructure

darkreading

Interpol's recent operation, named Jackal IV, has successfully targeted and disrupted crime-as-a-service networks in West Africa. This initiative specifically aimed at dismantling the infrastructure supporting criminal groups like Black Axe, which are known for their involvement in cybercrime and other illegal activities. By coordinating efforts across multiple countries, law enforcement agencies were able to undermine these networks that facilitate a variety of cybercrimes, including scams and fraud. The operation is significant because it addresses the growing trend of organized cybercrime that operates across borders, posing a threat to individuals and businesses alike. The impact of such operations is crucial in making online spaces safer and more secure.

Aug 26, 2026

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

The Hacker News

INTERPOL's Operation Jackal IV has successfully dismantled parts of organized cybercrime networks in West Africa, resulting in the arrest of 58 individuals and the identification of 263 suspects across 22 countries. This operation specifically targeted groups such as Black Axe, which are known for their involvement in various forms of cyber fraud. The crackdown comes in response to the growing global threat posed by these criminal organizations, which have been linked to scams that affect individuals and businesses worldwide. By collaborating with law enforcement agencies from multiple continents, INTERPOL aims to disrupt these networks and reduce the incidence of cyber fraud, which continues to pose significant risks to online security. The operation underscores the importance of international cooperation in addressing cybercrime effectively.

Aug 26, 2026

Meta adds three new features to keep WhatsApp accounts secure

Help Net Security

Meta has introduced new security features for WhatsApp aimed at enhancing user account protection. The updates include stronger two-step verification, which adds an extra layer of security during account access, and advanced notifications for calls from unknown numbers, helping users identify potential spam or scam calls. Additionally, users can now add multiple passkeys to their accounts, allowing for more flexible security options. These enhancements are part of Meta's ongoing effort to ensure that user conversations remain private and secure, particularly as concerns over digital privacy continue to grow. This is important for all WhatsApp users who want to safeguard their personal information and communications from unauthorized access.

Aug 26, 2026