Attacks leveraging a critical Apache RocketMQ flaw, tracked as CVE-2023-33246, to deploy the DreamBus botnet and a Monero miner have prompted the inclusion of the bug in the Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalog, according to BleepingComputer. Vulnerable RocketMQ distributed messaging and streaming systems could be targeted by various threat actors to facilitate the delivery of different payloads, said CISA, which noted that exploitation has been made possible by executing system user commands through the update configuration functionality of the platform.

Source: SC Magazine