Hackers exploit SiteGuard WAF flaw to run commands as admins

Attackers are exploiting a command-injection flaw in SiteGuard Server Edition, a web application firewall used on hundreds of thousands of sites, to run commands with root or SYSTEM privileges. The bug is in the statistics feature, which is on by default, and Japan's CERT agency says abuse is confirmed. The vendor released an update and warns patching may erase evidence, so save logs first.

Summary written with AI by HowTechMoves, based on reporting by BleepingComputer.