https://www.theregister.co.uk/2017/09/11/apache_rebuts_equifax_allegation/

The Apache Software Foundation has defended its development practices in the face of a report alleging its code was responsible for the Equifax data leak.

QZ.com, an outlet run by Atlantic Media, alleged that the hack was the result of an attack on Apache Struts, which as we reported last week was found to have a flaw allowing malware to be injected into corporate networks. The outlet pointed out that the flaw may have been present in Struts for nine years.