log4j – Computer Security Articles

Log4Text is a recently found vulnerability in Apache Commons. Log4Text provoked a knee jerk reaction because it reminds us of Log4Shell. So should we worry?

(Read more…)

The post Why Log4Text is not another Log4Shell appeared first on Malwarebytes Labs.

Microsoft Security

MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations

August 25, 2022 admin cybersecurity, log4j, mercury, Microsoft security intelligence

Credit to Author: Paul Oliveria| Date: Thu, 25 Aug 2022 16:00:00 +0000

Microsoft detected an Iran-based threat actor the Microsoft Threat Intelligence Center (MSTIC) tracks as MERCURY leveraging exploitation of Log4j 2 vulnerabilities in SysAid applications against organizations located in Israel.

The post MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations appeared first on Microsoft Security Blog.

MalwareBytes Security

Researchers found one-click exploits in Discord and Teams

August 15, 2022 admin discord, electron, electronjs, Exploits and vulnerabilities, log4j, log4shell, microsoftteams, news, NodeJS, Spotify, v8 chrome

Categories: Exploits and vulnerabilities

Categories: News

Tags: Discord

Tags: Spotify

Tags: MicrosoftTeams

Tags: Electron

Tags: ElectronJS

Tags: NodeJS

Tags: V8 Chrome

Tags: Log4Shell

Tags: Log4j

A group of security researchers found a series of vulnerabilities in the software underlying popular apps like Discord, Microsoft Teams, and many others

MalwareBytes Security

PyPI starts rolling out required 2FA for important projects

July 12, 2022 admin 2fa, log4j, psf, pypi, reports

Credit to Author: Pieter Arntz| Date: Tue, 12 Jul 2022 13:35:15 +0000

PyPI is rolling out a 2FA requirement for maintainers of critical projects.

The post PyPI starts rolling out required 2FA for important projects appeared first on Malwarebytes Labs.

QuickHeal Security

Critical Zero-Day “Log4Shell” Vulnerability “CVE-2021-44228” Exploited in the Wild

May 10, 2022 admin #zerodayvulnerability, cve-2021-44228, cybersecurity, log4j, malware, Uncategorized, Vulnerability

Credit to Author: Amruta Wagh| Date: Tue, 10 May 2022 10:40:09 +0000

On December 9, 2021, Apache revealed a severe Remote code execution vulnerability CVE-2021-44228 named “Log4Shell” in Apache Java-based…

The post Critical Zero-Day “Log4Shell” Vulnerability “CVE-2021-44228” Exploited in the Wild appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

Security Sophos

Horde of miner bots and backdoors leveraged Log4J to attack VMware Horizon servers

March 29, 2022 admin crypto mining, Featured, horizon, initial access broker, log4j, threat research, VMware

Credit to Author: Gabor Szappanos| Date: Tue, 29 Mar 2022 11:26:28 +0000

In the wake of December 2021 exposure of a remote code execution vulnerability (dubbed “Log4Shell”) in the ubiquitous Log4J Java logging library, we tracked widespread attempts to scan for and exploit the weakness—particularly among cryptocurrency mining bots. The vulnerability affected hundreds of software products, making it difficult for some organizations to assess their exposure. One […]

← Previous