News

ZDNet3y
Security warning: New zero-day in the Log4j Java library is already being exploited | ZDNET
A newly discovered zero-day vulnerability in the widely used Java logging library Apache Log4j is easy to exploit and enables attackers to gain full control of affected servers. Tracked as CVE ...
IT World Canada3y
It could take years for applications using vulnerable version of Java log4j library to be patched, says expert
The bug, CVE-2021-44228, affects a Java logging package called log4j. It was. Infosec leaders around the world are being urged to heed warnings from national computer emergency teams, ...
ZDNet3y
AWS's AI code reviewer now spots Log4Shell-like bugs in Java and Python code - ZDNET
Amazon Web Services (AWS) has updated the 'detectors' in its CodeGuru Reviewer tool to seek out log injection flaws like the recently disclosed Log4Shell bug in the popular Java logging library ...