Hot Topics

Apache Log4j Vulnerability

time security Log4j

Log4j: Three Flaws and Counting

| | 0-day vulnerability, Apache Log4j, Apache Log4j Vulnerability, Java (Dcrtr variant), WannaCry
“With the attention CVE-2021-44228 has received, I wouldn’t be surprised if we saw a third CVE related to #Log4j2,” Valtix Senior Security Analyst Davis McCarthy said last week. Those prophetic words turned ...
Security Boulevard
Google WhiteSource Log4j Deepfence threat report

WhiteSource Open Source Tool Can Discover Log4j Vulnerabilities

| | Apache Log4j Vulnerability, open source application scan, static code analysis, WhiteSource
WhiteSource has made available an open source tool to detect vulnerable instances of Log4j logging software. The recently disclosed flaw allows cybercriminals to launch a remote code execution (RCE) attack via Java ...
Security Boulevard
UPDATED: Cybereason Log4Shell Vaccine Offers Permanent Mitigation Option for Log4j Vulnerabilities (CVE-2021-44228 and CVE-2021-45046)

UPDATED: Cybereason Log4Shell Vaccine Offers Permanent Mitigation Option for Log4j Vulnerabilities (CVE-2021-44228 and CVE-2021-45046)

| | Apache Log4j Vulnerability, Apache Servers, CVE-2021-44228, Cybereason Defense Platform, enterprise security, Exploits, GitHub, Log4Shell, Logout4Shell Vaccine, mitigation, Network Security, patch management, patching, rce, remediation, Remote Code Execution, Vulnerabilities, vulnerability, zero-day
UPDATE 12/17/21: The Logout4Shell Vaccine has been updated to add a persistent option in addition to the existing one which reverted upon server restart. The previous version of the Vaccine used the ...
Blog
DBIR Log4j Breach Discovery Takes 197 Days

Here We Go Again: Second Log4j Flaw Surfaces

| | 0-day vulnerability, Apache Log4j Vulnerability, Java, Log4j, zero-day
Maybe Log4j vulnerabilities are like rats—for every one that’s visible, multiple others scurry beneath the surface. It’s too early to tell if that’s what will happen with Log4j. But just a day ...
Security Boulevard
Cybereason Log4j threat hunting

Cybereason Makes Log4Shell ‘Vaccine’ Available

| | Apache Log4j Vulnerability, AppSec, Java, RCE vulneability
Cybereason has created what it described as a “vaccine” for the Apache Log4Shell vulnerability (CVE-2021-44228) that is roiling organizations that rely on the open source Log4j logging framework to manage Java applications ...
Security Boulevard
Log4j RDP attack

Apache Log4j Threatens, Well, Everything

| | Apache Log4j Vulnerability, cyberattack, Enterprise IT Security, Java
It doesn’t get much worse than this, at least according to cybersecurity experts. The RCE bug currently being actively exploited in the widely used Apache Log4j promises to leave a trail of ...
Security Boulevard
UPDATED: Cybereason Log4Shell Vaccine Offers Permanent Mitigation Option for Log4j Vulnerabilities (CVE-2021-44228 and CVE-2021-45046)

UPDATED: Cybereason Log4Shell Vaccine Offers Permanent Mitigation Option for Log4j Vulnerabilities (CVE-2021-44228 and CVE-2021-45046)

| | Apache Log4j Vulnerability, Apache Servers, CVE-2021-44228, Cybereason Defense Platform, enterprise security, Exploits, GitHub, Log4Shell, Logout4Shell Vaccine, mitigation, patch management, patching, rce, remediation, Remote Code Execution, vulnerability, zero-day
UPDATE 12/17/21: The Logout4Shell Vaccine has been updated to add a persistent option in addition to the existing one which reverted upon server restart. The previous version of the Vaccine used the ...
Blog

Secure Guardrails