SentinelOne observed the potentially destructive Iran-linked APT group TunnelVision actively exploiting the Log4j vulnerability to deploy ransomware on unpatched VMware Horizon servers. click here to read full Article Read more on Hacking News
Java applications are deployed everywhere using this logging tool. Hundreds of vendors are known to be vulnerable. This vulnerability received the maximum CVSS score which is a very rare occurrence. click here to read...
Cybercriminals looking to capitalize on the Log4Shell vulnerability are attacking devices from SolarWinds and ZyXEL that are known to have used the Log4j library inside their software. click here to read full Article Read...
Google and IBM are urging tech organizations to join forces to identify critical open source projects after attending a White House meeting on open source security concerns. click here to read full Article Read...
An Iranian state-sponsored actor has been observed scanning and attempting to abuse the Log4Shell flaw in publicly-exposed Java applications to deploy a hitherto undocumented PowerShell-based modular backdoor dubbed “CharmPower” for follow-on post-exploitation. “The actor’s...
Hackers believed to be part of the Iranian APT35 state-backed group (aka ‘Charming Kitten’ or ‘Phosphorus’) has been observed leveraging Log4Shell attacks to drop a new PowerShell backdoor. click here to read full Article...
With the last month of 2021 dominated by the log4J vulnerabilities discovery, publication, and patches popping up in rapid succession, odds are you have patched your system against Log4J exploitation attempts. At least some...
Public vulnerability disclosure happens quite frequently, for vulnerabilities in a wide variety of software, from the most esoteric to the most mundane (and widely used). click here to read full Article Read More on...
FTC warns companies to mitigate Log4j vulnerability click here to read full Article Read More on latest Security Updates
The digital security team at the U.K. National Health Service (NHS) has raised the alarm on active exploitation of Log4Shell vulnerabilities in unpatched VMware Horizon servers by an unknown threat actor to drop malicious web shells...
CrowdStrike researchers have found Aquatic Panda threat actors who are abusing Log4Shell exploit tools on a vulnerable VMware installation at large academic institutions. The threat group is known for using tools for maintaining persistence...
Microsoft has warned Windows and Azure customers to remain vigilant after observing state-sponsored and cyber-criminal attackers probing systems for the Log4j ‘Log4Shell’ flaw through December. click here to read full Article Read More on...
While the risk posed by the original Log4Shell exploit is critical, milder variants of the vulnerability emerged in Log4j versions, including 2.15 and 2.16—previously believed to be fully patched. click here to read full...
Following the “Log4Shell” mayhem, Apache has released multiple updates to its Log4j library addressing the… Apache Releases Log4j 2.17.1 Fixing Another Code Execution Flaw on Latest Hacking News. click here to read full Article...
A Chinese hacker group known for industrial espionage and intelligence collection used a vulnerability in Log4j to go after a large academic institution, researchers at CrowdStrike revealed Wednesday. click here to read full Article...
The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat actors to run malicious code on affected systems,...
