Apache Log4j News Today

Hackers continue to exploit the Log4j vulnerability in vulnerable applications, as shown by the Iranian MuddyWater threat actor who was found targeting Israeli organizations using the SysAid software.

Its been four months since Log4Shell, a critical zero-day vulnerability in the ubiquitous Apache Log4j library, was discovered, and threat analysts warn that the application of the available fixes is still way behind.

Why developers may already be at risk, how to detect and mitigate the Log4j vulnerabilities now, and how to improve code security in the future.

Why developers may already be at risk, how to detect and mitigate the Log4j vulnerabilities now, and how to improve code security in the future.

Researchers warn of critical Java flaw impacting the console of the H2 Java SQL database. Users are advised to update their H2 database to mitigate remote code execution risk.

Researchers warn of critical Java flaw impacting the console of the H2 Java SQL database. Users are advised to update their H2 database to mitigate remote code execution risk.

Multiple security researchers have spotted threat actors already exploiting the Apache Log4j vulnerability by deploying Muhstik and Mirai botnets to target Linux

情報システム部門・IT管理者、そしてITに関わるすべての方に向け 『Apache Log4j 脆弱性の影響緩和のために今できること』を緊急公開

Multiple security researchers have spotted threat actors already exploiting the Apache Log4j vulnerability by deploying Muhstik and Mirai botnets to target Linux

A zero-day exploit was recently identified within the Apache log4j logging library, which can potentially be used by hackers to take over entire servers via logging messages. The vulnerability affects a number of online services, from Steam and Twitter to Amazon and Minecraft, among others.