Fake PDFs and Chat Apps Let Patchwork Spy on PCs and Android Phones

New research identifies 12 vulnerabilities, including remote code execution flaws in Bonita BPM and Apache OFBiz, caused by weaknesses in routing and authentication. To mitigate these risks, administrators should apply security updates, rotate signing keys, and enforce strict path normalization to secure internal middleware.