Page 9 - Apache Struts News Today

The vulnerability's discovery is credited to researchers at LunaSec and Alibaba Cloud Security's Chen Zhaojun. It leverages a widely used Apache-based logging utility, log4j, to log server...

Infosec leaders around the world are being urged to heed warnings from national computer emergency teams, software suppliers and cybersecurity experts about a…

‘Scope and potential impact unlike any component vulnerability I can recall’

A number of popular services, including Apple iCloud, Twitter, Cloudflare, Minecraft and Steam, are reportedly vulnerable to a zero-day exploit affecting a popular Java logging library. The vulnerability, dubbed “Log4Shell” by researchers at LunaSec and credited to Chen Zhaojun of Alibaba, has been found in Apache Log4j, an open source logging utility that’s used in […]

The Log4Shell vulnerability critically threatens anybody using the popular open-source Apache Struts framework and could lead to a “Mini internet meltdown soonish.” #zeroday #apachestruts

A critical zero-day vulnerability in Apache Log4j (CVE-2021-44228), a widely used Java logging library, is being leveraged by attackers.

How can orgs get the most from cloud-native environments and agile delivery?

Even the smallest unknown or unpatched vulnerability can be catastrophic.

Solving Modern Software Dependency Management Issues This article discusses how build tools such as Maven, Pip, etc. can give more accurate results using call graphs covering both application and its dependencies. by Join the DZone community and get the full member experience.Join For Free In order to help developers tracking dependencies, FASTEN provides a new intelligent package management framework, on top of existing dependency management tools. The FASTEN European research project wants t...

The massive 2017 Equifax hack was done in part by exploiting a critical (though patched) web server vulnerability in Apache Struts, a common and popular form of open source software to creating Java applications. (Equifax) Cybersecurity startup WhiteSource announced it has raised $75 million in Series D funding, highlighting how tech and security investors are increasingly focusing on the open source software security market. The latest investment of $75 million, drawn mostly from Pitango Growt...