Tag: Log4j

It’s been nearly four months since Alibaba Cloud’s security team first reported a remote code execution (RCE) vulnerability within Apache ...

At 2:25 pm on December 9, an infamous (now deleted) tweet linking a zero-day proof of concept exploit for the ...

Last year (2021) was a tough year for the software supply chain. And in December, the year’s parting gift was ...

For years, developers of free, open-source software have been telling anyone who will listen that their projects needs better financial ...

Over the last few weeks, log4j has been the focus in most organizations. It continues to dominate tech media as ...

WhiteSource this week made good on a promise to add Log4j vulnerability remediation capabilities to both its free and commercial ...

Microsoft has warned Windows and Azure customers to remain vigilant after observing state-sponsored and cyber-criminal attackers probing systems for the ...

The Federal Trade Commission has a message for companies that aren’t taking the threat posed by log4j to heart: Patch ...

Security experts have warned that the Log4j vulnerability could still enable threat actors to launch attacks years from now, if ...

One of the reasons the Log4j vulnerability is so dangerous is that it is so widespread in applications literally everywhere. ...