资讯

A group of developers and maintainers scrambled to secure the Log4j vulnerability over the weekend, but there is still a lot of work to do to clean up the mess.
If you're not certain whether your Java project is free from Log4j vulnerabilities, you should try this easy-to-use scanning tool immediately.
Attackers are actively exploiting a critical vulnerability in Apache Log4j, a logging library that’s used in potentially millions of Java-based applications, including web-based ones.
NSCS warns that the Log4j flaw won't be fixed overnight and that defenders could suffer burnout during the process.
A vulnerability Log4j bug is causing Minecraft users to be exposed to potentially dangerous threats. Learn more about the issue.
Why you may already be at risk, how to detect and mitigate the Log4j vulnerabilities now, and how to improve your code security in the future.
Datto immediately began sharing active threat intelligence with the MSP community about attacks it observed to help MSPs understand the Log4j threat and how it was being exploited.
Dec 14, 2021 14:45:00 A cheat sheet that summarizes how to deal with the Java / Log4j library vulnerability 'Log4Shell' is being released, and the affected products are also revealed at a glance.
Log4j flaw: Attackers are targeting Log4Shell vulnerabilities in VMware Horizon servers, says NHS NHS Digital issues an advisory urging organisations to take action to protect themselves.
Two MSPs who were not impacted still took the vulnerability as serious as possible, saying you must stay ready and assume the vulnerability is there.