System Talos News Today

This month marks the one-year anniversary of the discovery of the Log4j2 vulnerability. Technically, it's a 2021 cybersecurity event. However IT and infosec leaders spent much of 2022 hunting for and patching applications using the buggy open-source logging library module. If they're smart, they'll keep doing it in 2023, says one expert. "Many CISOs may

IT departments and developers around the world are furiously scanning applications for evidence of the critical zero-day vulnerability in the Apache log4j2…

Researchers have already seen examples of threat actors planting Cobalt Strike beacons and cryptomining apps after successfully exploiting the bug