Rondo Meets Geoserver, (Wed, Jul 22nd)

A Rondo botnet attack targeting Geoserver, a geographic information system tool, is being observed. The attack leverages a vulnerability (CVE-2024-36401) to execute arbitrary shell commands, delivering a Rondo payload. This is a repeat of previous Rondo attacks against Geoserver.