Apache’s open-source software utility collection Hadoop and open-source, unified stream-processing, and batch-processing framework Flink are being targeted in new malware attacks that involve packers and rootkits to evade detection, SiliconAngle reports. Apache Hadoop YARN had a misconfiguration within its ResourceManager component exploited to facilitate arbitrary code execution and unauthenticated app creation and execution, a report from Aqua Security showed.

Source: SC Magazine