log4j
The most terrifying words for any IT leader to hear are “zero-day exploit” which refers to a cyber attack that targets a software weakness. Once the software vulnerability is identified, the attacker immediately develops an exploit and launches an attack using it. Organizations must therefore take precautions to protect themselves from dangerous vulnerabilities and must […]
A major vulnerability in the popular Java Log4j logging package, called Log4Shell, discover on December 9, 2021. CVE-2021-44228 is a remote code execution vulnerability with a severity of 10 (the highest possible risk level) that allows an attacker to take total control of any compromised machine. What is log4j? The Apache Foundation has created […]