Last weekend was a bad time to be a server administrator. A critical vulnerability emerged in Apache Log4j2. The big problem? Attackers have the chance to exploit the open-source Java package that all ...
The Log4shell exploit in the widely-used Apache Log4j package has had just about every single sysadmin in the world working nights and weekends to desperately get their internet-facing servers updated ...
Conti has become the first professional-grade, sophisticated ransomware group to weaponize Log4j2, now with a full attack chain. The Conti ransomware gang, which last week became the first ...
On Thursday, December 9, 2021, a “critical” zero-day exploit was reported in the widely used log4j2 library. The exploit “did not affect the Hedera network,” the platform’s developers claim while ...
IT departments and developers around the world are furiously scanning applications for evidence of the critical zero-day vulnerability in the Apache log4j2 Java-based logging library in open source ...
This month marks the one-year anniversary of the discovery of the Log4j2 vulnerability. Technically, it’s a 2021 cybersecurity event. However IT and infosec leaders spent much of 2022 hunting for and ...
Close to half of corporate networks around the world have now been actively probed by malicious actors trying to find a way to exploit CVE-2021-44228, aka Log4Shell remote code execution (RCE) ...
Minecraft has patched the exploit, but the threat for many others remains. Credit: Georg Wendt/picture alliance via Getty Images It's being called the "worst bug impacting the Internet in the last 5 ...