Updated: Vulnerability on 3m Systems Could Spread Ransomware To Schools

Researchers at Cisco identified approximately 3.2 million JBOSS application servers vulnerable to exploitation and found about 1,600 systems already compromised; attackers have leveraged those flaws to deploy ransomware (notably SamSam) using web shells and the JexBoss exploit. K-12 schools running Follett's Destiny library management system were specifically called out as affected, Follett issued a patch and has auto-updated hosted customers while remediation continues, and healthcare organizations have also been targeted in related campaigns.