Tag
#Apache
3 stories taggedApache.

Threat Intelligence
Stealthy Linux rootkit hides inside F5 BIG-IP devices and runs entirely from memory
Researchers say the implant, tracked by ESET as PoisonedRefresh, hooks Apache to slip a hidden web shell into legitimate PHP files without ever touching disk.
4 min read

Threat Intelligence
Chinese-Speaking Crew Slips Malicious Apache Modules Onto Brazilian .gov and .edu Sites
Check Point tracks the cluster as Gambling Goblin, with medium-confidence links to Chinese-speaking SEO-poisoning operators active since mid-2025.
4 min read

Vulnerabilities
HTTP/2 Bomb: A Decade-Old Compression Trick Finally Gets a CVE
A chained HPACK attack lets small packets force runaway memory allocation on nginx, Apache, IIS, Envoy and Cloudflare's Pingora. Patches are partial. Exposure is wide.
3 min read