Researchers Warn of Exposed JDWP Interfaces Targeted for Cryptomining Attacks

Since JDWP lacks authentication or access control mechanisms, exposing the service to the internet can open up a new attack vector that attackers can abuse as an entry point, enabling full control over the running Java process.