Are Macs Safe from Spyware?

In essence, CVE-2023-46604 poses a severe risk, as it enables remote attackers to execute arbitrary commands, exploiting the deserialization vulnerability in ActiveMQ's OpenWire protocol. The exploitation process involves the manipulation of serialized class types, offering threat actors the capability to instantiate any class on the server's classpath. The implications extend beyond mere data compromise, as threat actors leverage this vulnerability for the deployment of potent malware, emphasizing the critical need for organizations to take immediate action to secure their ActiveMQ deployments.

Follina is a critical RCE vulnerability in Microsoft Office products that can be exploited by opening malicious documents or viewing them in the preview pane. The maldoc uses Word's external link to load the HTML and then uses the "ms-msdt" scheme to execute PowerShell code.