This past Thursday, December 9th, a 0-day exploit in the Java logging library, log4j (version 2) was discovered. This vulnerability results in Remote Code Execution by logging a certain string.

The Apache Log4j Crisis. Discover the shocking Log4Shell exploit that shook the internet. Learn vital lessons about cybersecurity and safeguarding our digital realm.

Friday for Cisco Network Services Orchestrator (NSO); and Jan. 2 for Cisco Nexus Dashboard. For the other 31 products affected by the Log4j vulnerability, Cisco said it is continuing to evaluate ...

Log4j is now up to 2.17.1, as there is yet another RCE to fix, CVE-2021-44832. This one is only scored a 6.6 on the CVSS scale, as opposed to the original, which weighed in at a 10. 44832 requires ...

Apache Log4j 2.11.1, the popular framework for logging application behavior, has been released, providing significant improvements over the previous release. It adds new modern features ...

CISA urged end users to: upgrade to Log4j version 2.15.0; identify any external facing devices that have Log4j installed; ensure their Security Operations Center (SOC) is taking action on every ...