A Year Later, That Brutal Log4j Vulnerability Is Still Lurking
Apache had to scramble at the beginning of December 2021 to be ready to release patches for Log4Shell when it publicly disclosed the situation on December 9…
Browsing Tag
Log4j
Not patched Log4j yet? Assume attackers are in your network, say CISA and FBI
Image: Getty Images/iStockphotoA joint security alert by CISA and the FBI has warned organizations that haven't applied much-needed Log4j security…
Lazarus hackers are using Log4j to hack US energy companies
Energy providers from around the world, including the United States, Canada, and Japan, have reportedly been targeted by state-sponsored North Korean…
Hackers are still abusing Log4j deployments, Microsoft warns
Log4Shell, one of the largest and potentially most devastating vulnerabilities to ever be discovered, is still being leveraged by threat actors more than…
Google backs call for tighter open source security in aftermath of Log4j
Google has addressed recent US government calls to crack down on threats related to the Log4j vulnerability, saying it backs the warnings and unveiled how…
Cyber Safety Review Board classifies Log4j as ‘endemic vulnerability’
CSRB has released a report saying that the Log4j exploit is here to stay long-term, meaning businesses should be ready in case of a cyber attack.…
Log4j security threats could be here for a long time
It’s going to take years, maybe even a decade, to completely eradicate the threat posed by the Log4j (opens in new tab) vulnerability, security experts…
Log4j flaw: Why it will still be causing problems a decade from now
Despite a well-coordinated effort to rally organizations to patch to the major open-source software flaw, cybersecurity officials don't see an end to the…
Log4j software flaw ‘endemic,’ new cyber safety panel says
The Department of Homeland Security logo is seen during a news conference in…