Adversary Tradecraft: Apache Tomcat RCE

CVE-2025-24813 is a critical vulnerability (CVSS base score of 9.8) affecting Apache Tomcat, a widely used open-source web server and servlet container. This issue affects Apache Tomcat: 0.0-M1 through 11.0.2, 1.0-M1 through 10.1.34, 0.0.M1 through 9.0.98 (and most likely older versions.) In this blog, we’ll simulate an attack and look at the activity within […]