> TritonInfoSec News
Home / Jul 28, 2026 / Story
0
#6 BleepingComputer general July 27, 2026 at 23:49 UTC

Hackers target US firms in FastJson RCE zero-day attacks

By Bill Toulas

AI Summary

Threat actors are actively exploiting a zero-day remote code execution vulnerability in FastJson, a widely-used open-source Java JSON parsing library, targeting US firms without requiring user interaction or elevated privileges. The unauthenticated RCE nature of the flaw makes it particularly dangerous for any Java application using FastJson for input parsing.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 83.0/100

# More from July 28

  1. 1
    Coca-Cola confirms data theft in Fairlife ransomware attack BleepingComputer
  2. 2
    Ernst & Young data breach claimed by ShinyHunters extortion gang BleepingComputer
  3. 3
    Arista patches VeloCloud Orchestrator zero-day exploited in attacks BleepingComputer
  4. 4
    DentaQuest Data Breach Potentially Impacts Over 23 Million People SecurityWeek
  5. 5
    New Certighost PoC exploit lets attackers hijack Windows domains BleepingComputer
  6. 7
    AI Agent Drives Espionage Attack on Thai Ministry of Finance Dark Reading
  7. 8
    PTC Windchill Vulnerability Exploited in Ransomware Campaign SecurityWeek
  8. 9
    Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw The Hacker News
  9. 10
    Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials SecurityWeek