BleepingComputer reports that nearly 45,000 internet-exposed Jenkins open-source automation servers around the world could be compromised in attacks leveraging the critical remote code execution vulnerability, tracked as CVE-2024-23897, which has already been addressed in updates issued last week. China accounted for most of the vulnerable Jenkins instances, followed by the U.S., Germany, India, France, and the UK, according to a report from Shadowserver.

Source: SC Magazine