[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:hackers-target-us-firms-in-fastjson-rce-zero-day-attacks-ms5qqr0e":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":13,"action_required":17,"article_ids":18,"ioc_summary":20,"source_urls":21,"status":23,"expires_at":24,"created_at":25,"updated_at":26,"articles":27},"fa61a7f3-881b-4802-b9db-bdfea6ad8342","Hackers target US firms in FastJson RCE zero-day attacks","hackers-target-us-firms-in-fastjson-rce-zero-day-attacks-ms5qqr0e","A critical RCE zero-day (CVE-2026-16723) in FastJson Java library versions 1.2.68-1.2.83 is actively exploited against U.S. firms across multiple sectors. Attackers can execute arbitrary code without user interaction. FastJson 1.x is unmaintained, leaving affected systems without patches.","critical","advisory",[12],"CVE-2026-16723",[14,15,16],"FastJson","Alibaba","fastjson2","Immediately inventory all applications using FastJson 1.2.68-1.2.83. Enable SafeMode as emergency mitigation or upgrade to fastjson2. Hunt for exploitation indicators in application logs and network traffic.",[19],"f624bc70-d608-4c92-90a5-9754a44252e4",null,[22],"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhackers-target-us-firms-in-fastjson-rce-zero-day-attacks\u002F","active","2026-07-31T07:06:01.868+00:00","2026-07-29T07:06:04.612629+00:00","2026-07-29T07:10:04.684974+00:00",[28],{"id":19,"title":6,"url":22}]