If you haven't patched WebLogic server console flaws in the last eight days 'assume it has been compromised'

Stark warning from SANS' Johannes Ullrich - RCE's gonna GET 'ya

Last week Oracle released one of its mammoth quarterly patch dumps - with 402 fixes. Well, it turns out that if you missed one and you're running WebLogic 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0, you've probably already been tagged by hackers....