Active exploits In recent months, there has been evidence that threat actors are gathering around a new malware tool to exploit the Log4j vulnerability.

A single flaw in Apache Log4j spiraled into one of the most dangerous exploits ever found. Experts warned it could have taken ...

Three years after its discovery, the Log4J vulnerability (CVE-2021-44228) exploit remains one of the most attempted exploits observed by cloud security provider Cato Networks. Cato Cyber Threat ...

Unveiling the Dark Side of Cyberworld: The Apache Log4j Crisis. Discover the shocking Log4Shell exploit that shook the internet. Learn vital lessons about cybersecurity and safeguarding our ...

'I think what surprised a lot of people was how deep the fact-finding could go,' Cyber Safety Review Board Chair Robert Silvers says at Black Hat about the response to the Log4j exploit.

A Year Later, That Brutal Log4j Vulnerability Is Still Lurking Despite mitigation, one of the worst bugs in internet history is still prevalent—and being exploited.

The Cyber Safety Review Board (CSRB) recently labeled the Log4j security exploit as an ‘endemic vulnerability’ that will linger for years, according to a report released on Jul 11, 2022. The ...

Log4Shell ain't over until it's over, warns the US review board tasked with investigating the critical Apache Log4J flaw known as Log4Shell.

CyCognito released the next gen of its Exploit Intelligence (EI) tool with an integrated external attack surface sandbox testing environment.

To help enterprise users dig up hidden cloud misconfigurations so as to avoid log4j-like catastrophic vulnerabilities, Orca Security has introduced a new cloud asset search option on its cloud ...

The notorious North Korean hacking group known as Lazarus continues to exploit CVE-2021-44228, aka "Log4Shell," this time to deploy three previously unseen malware families written in DLang.