JexBoss is an open-source Python tool for testing and exploiting vulnerabilities in Java applications and platforms, including JBoss AS/WildFly. It was released on GitHub in November 2014, and its author added features and exploits until March 2017.
This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this bulletin or otherwise.
The NCCIC, part of CISA, reports a global DNS infrastructure hijacking campaign that can let attackers use compromised credentials to redirect traffic and obtain valid encryption certificates for an organization.
The alert does not apply to federally certified voting systems running Windows 7. Microsoft will provide free security updates to those systems through the 2020 election.
CISA’s alert describes the BlueKeep vulnerability in Microsoft Windows operating systems, including 32-bit and 64-bit versions and all service pack versions.
