HACKERS EXPLOITING BUG IN POPULAR TRIMBLE CITYWORKS TOOL USED BY LOCAL GOVERNMENTS

Summary from the TLDR InfoSec newsletter

CISA is warning of a vulnerability in the Trimble Cityworks asset management software that is commonly used by local and federal governments. The vulnerability allows for a malicious actor to potentially achieve RCE against a customer's IIS server. CISA warns that the vulnerability is being actively exploited and has mandated that federal civilian agencies patch it by February 28.