HiveCmd.jar Malicious Java Add-on
A malicious Java user-defined function (UDF) for Apache Hive that allows remote code execution on HiveServer2. The attacker deployed it against the…
Tag: Hadoop
Cloudera Data Platform Company
A company that provides a Hadoop distribution. Cloudera warns that installing user-defined functions in Hive can lead to arbitrary code execution.
Hacker Deploys Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
An attacker installed the open-source Hermes AI assistant on a rented server, disabled its permission-requesting YOLO mode, and directed it at Thailand's…
Apache Software Foundation
The organization behind Apache Hadoop and HiveServer2, which were targeted in the attack. The default NONE authentication mode in HiveServer2 was exploited.