Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

Attackers Target WSO2 API Manager with Forged Admin Tokens

Part of the WSO2 story · since 16 Sep

Quiet for 5 weekslast report 25 Sep6 articles5 outlets
16 Sep · The Hacker News first10 Oct18 OctNowThis article1st of 6
  • Wed 16 Sep, 06:45 UTC. The Hacker News, first report. Attackers Target WSO2 API Manager with Forged Admin Tokens. This article, 1st of 6.
  • Wed 16 Sep, 09:00 UTC. SecurityWeek, its first report on the story. Critical WSO2 Flaw Exploited to Steal API Credentials and Secrets. Cites a CVE in CISA KEV.
  • Thu 24 Sep, 20:01 UTC. CISA, its first report on the story. CISA Warns of Active Exploits Targeting Critical WSO2 Flaw. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 03:47 UTC. SecurityOnline, its first report on the story. CISA Warns of Exploited WSO2 and Adobe Commerce Flaws. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 06:36 UTC. The Hacker News. CISA Flags Exploited WSO2 and Adobe Commerce Vulnerabilities.
  • Fri 25 Sep, 09:30 UTC. Security Affairs, its first report on the story. CISA Flags Critical WSO2 and Magento Flaws Used in Attacks. Cites a CVE in CISA KEV.

The article discusses active exploitation attempts targeting the WSO2 API Manager through JWT bypass using forged admin tokens, highlighting an increasing trend in API security vulnerabilities. Key points include the method of exploitation, potential impacts on affected systems, and recommendations for improving security measures to mitigate such risks. The content emphasizes the importance of awareness and proactive defense strategies in the evolving landscape of cybersecurity.

How the story developed

All 6 articles
Quiet for 5 weekslast report 25 Sep6 articles5 outlets

6 articles from 5 outlets since 16 Sep. Quiet since 25 Sep. This was the first report.

Now16 Sep1819202122232425First reportThe Hacker News · 16 Sep, 06:45CISA alert24 Sep, 20:01 · official
  • Wed 16 Sep, 06:45 UTC. The Hacker News, first report. Attackers Target WSO2 API Manager with Forged Admin Tokens. This article, 1st of 6.
  • Wed 16 Sep, 09:00 UTC. SecurityWeek, its first report on the story. Critical WSO2 Flaw Exploited to Steal API Credentials and Secrets. Cites a CVE in CISA KEV.
  • Thu 24 Sep, 20:01 UTC. CISA, its first report on the story. CISA Warns of Active Exploits Targeting Critical WSO2 Flaw. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 03:47 UTC. SecurityOnline, its first report on the story. CISA Warns of Exploited WSO2 and Adobe Commerce Flaws. Cites a CVE in CISA KEV.
  • Fri 25 Sep, 06:36 UTC. The Hacker News. CISA Flags Exploited WSO2 and Adobe Commerce Vulnerabilities.
  • Fri 25 Sep, 09:30 UTC. Security Affairs, its first report on the story. CISA Flags Critical WSO2 and Magento Flaws Used in Attacks. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 6 articles as a list
  1. Wed 16 SepDay 02
    1. Attackers Target WSO2 API Manager with Forged Admin Tokens06:45 · The Hacker News · First report · This article, 1st of 6
    2. Critical WSO2 Flaw Exploited to Steal API Credentials and Secrets09:00 · SecurityWeek · Exploited CVE · Known exploited CVE

  2. Quiet for 8 days

    Thu 24 SepDay 81
    1. CISA Warns of Active Exploits Targeting Critical WSO2 Flaw20:01 · CISA · official · CISA alert · Picked up again · Known exploited CVE
  3. Fri 25 SepDay 93
    1. CISA Warns of Exploited WSO2 and Adobe Commerce Flaws03:47 · SecurityOnline · Known exploited CVE
    2. CISA Flags Exploited WSO2 and Adobe Commerce Vulnerabilities06:36 · The Hacker News
    3. CISA Flags Critical WSO2 and Magento Flaws Used in Attacks09:30 · Security Affairs · Known exploited CVE

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in