FASTJSON ZERO-DAY PUTS US FIRMS AT RISK

The FastJson library, commonly deployed across enterprise environments, contains a critical flaw that allows attackers to execute arbitrary code on affected systems. Threat actors have begun targeting US-based companies, leveraging the vulnerability to gain direct access without requiring users to take any action or possess special permissions. FastJson is extensively used in Java applications for JSON processing, making its compromise particularly dangerous across multiple industries. Organizations using the library are urged to monitor vendor announcements for patches and implement mitigations immediately. No details on the specific attack infrastructure or affected companies have been disclosed. Security researchers recommend applying updates as soon as vendors release them and reviewing system logs for suspicious FastJson-related activity.