A U.S. federal judge has ruled that Israeli spyware maker NSO Group violated U.S. hacking laws by using WhatsApp zero-days to deploy Pegasus spyware on at least 1,400 devices.
Apache has released a security update to address an important vulnerability in Tomcat web server that could lead to an attacker achieving remote code execution.