Shellshock Bash Vulnerability

NCC Group details the Shellshock (CVE-2014-6271) vulnerability affecting bash, the risk to CGI-enabled web servers and network/embedded appliances, and active exploitation observed in the wild where attackers used a command injection payload to download and execute a Python-based spammer; the post provides observed payload/IOC, recommended mitigations (patching, WAF rules, iptables, IDS signatures) and links to further technical analysis.