[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2NKwd9XyBg9EpivYsn385Q_cS4WdfsbuvVQc-OGjs2M":3},{"article":4,"iocs":53,"watch_terms":58,"solutions":59,"lesson":153},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"f624bc70-d608-4c92-90a5-9754a44252e4","Hackers target US firms in FastJson RCE zero-day attacks","hackers-target-us-firms-in-fastjson-rce-zero-day-attacks-acea04","Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges. [...]","A critical remote code execution zero-day vulnerability (CVE-2026-16723) in the FastJson Java library is being actively exploited by hackers to target U.S. organizations across various sectors. The flaw affects versions 1.2.68 through 1.2.83 and allows attackers to execute code without user interaction. As FastJson 1.x is no longer actively maintained, there is no immediate fix, and users are advised to enable SafeMode or migrate to fastjson2.","Hackers exploit FastJson RCE zero-day in US firms, targeting multiple industries.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhackers-target-us-firms-in-fastjson-rce-zero-day-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F05\u002F05\u002Fhacker.jpg","2026-07-27T23:49:44+00:00","2026-07-28T00:00:34.838924+00:00",9,[17,20,23,26,28],{"name":18,"type":19},"FastJson","product",{"name":21,"type":22},"Alibaba","vendor",{"name":24,"type":25},"Java","technology",{"name":27,"type":25},"Spring Boot",{"name":29,"type":19},"fastjson2","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54],{"type":55,"value":56,"context":57},"cve","CVE-2026-16723","FastJson RCE zero-day vulnerability",[21,18,29],{"controls":60,"vendors":146},[61,90,119],{"slug":62,"name":63,"problem":64,"products":65},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":91,"name":92,"problem":93,"products":94},"patch-management","Automated patch management","Known holes get closed in days, not months.",[95,103,111],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":120,"name":121,"problem":122,"products":123},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[124,132,138],{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":133,"product_name":134,"url":136,"description":137},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",[147],{"slug":148,"name":149,"logo_path":150,"roles":151},"imperva","Imperva","\u002Fvendor-logos\u002Fimperva.png",[152],"reported_by",{"slug":154,"title":155,"body":156,"framework_refs":157,"framework_notes":167},"fastjson-zero-day-rce-exploited-against-us-organizations","FastJson Zero-Day RCE Exploited Against U.S. Organizations","A critical zero-day vulnerability in the widely-used FastJson Java library (CVE-2026-16723) is being actively exploited against U.S. organizations, enabling unauthenticated remote code execution with no user interaction required. The root problem lies in reliance on an end-of-life open-source component that no longer receives active security maintenance, leaving affected organizations with no vendor-issued patch. This highlights the compounding risk of unmanaged third-party library dependencies — when a popular library reaches end-of-life, any newly discovered flaw becomes an indefinite exposure. Organizations that lack a software bill of materials (SBOM) or automated dependency tracking are especially blind to where FastJson exists in their environments, delaying detection and response.",[158,159,160,161,162,163,164,165,166],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","NIST SP 800-161: Supply Chain Risk Management (C-SCRM)","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 SA-12: Supply Chain Protection","NIST CSF ID.AM-2: Software platforms and applications inventoried","OWASP A08:2021 – Software and Data Integrity Failures","NIST SP 800-218 (SSDF) PW.4: Reuse Existing, Well-Secured Software","GDPR Article 32: Security of Processing (for EU-linked data exposure risk)",{}]