Log4j: The Evolution of Vulnerabilities to CVE-2021-45046 and What to Expect in 2022 | allinfosecnews.com

c

Jan. 11, 2022, 2:04 a.m. |

Cloud Security Alliance cloudsecurityalliance.org

This blog was originally published by Alert Logic here. Written by Josh Davies, Alert Logic. Threat Overview The internet has been alive with talk of Log4Shell (CVE-2021-44228), and for good reason. While the bug appears to have been introduced in 2013, only recently have we observed widespread exploitation. The vulnerability lies within the Apache open source Log4j library, commonly copied and pasted by developers into their Java based applications. Java is a massively popular ...

cve cve-2021-45046 log4j vulnerabilities

More from cloudsecurityalliance.org / Cloud Security Alliance

Cl

DevSecOps Tools 3 days, 13 hours ago | cloudsecurityalliance.org

code code management development devops +18

Cl

AI Hallucinations: The Emerging Market for Insuring Against Generative AI's Costly Blunders 5 days, 9 hours ago | cloudsecurityalliance.org

ai governance ai hallucinations blog chair +16

Cl

Why Business Risk Should be Your Guiding North Star for Remediation 5 days, 10 hours ago | cloudsecurityalliance.org

adoption agile attack attack surface +19

Cl

Upselling Cybersecurity: Why Baseline Security Features Shouldn’t Be a Commodity 5 days, 10 hours ago | cloudsecurityalliance.org

accountability advisory barr advisory consulting +23

Cl

Breach Debrief: The Fake Slackbot 1 week, 2 days ago | cloudsecurityalliance.org

abusing adaptive shield breach design +15

Cl

Understanding the Nuances: Privacy and Confidentiality 1 week, 2 days ago | cloudsecurityalliance.org

age american businesses clients +19

Cl

What’s in a Name? Defining Zero Trust for Leaders 1 week, 2 days ago | cloudsecurityalliance.org

analyst board business concept +17

Cl

Are You Ready for Microsoft Copilot? 1 week, 2 days ago | cloudsecurityalliance.org

ai chatbot chatbot copilot customers +13

Cl

Implementing a Data-Centric Approach to Security 1 week, 2 days ago | cloudsecurityalliance.org

access access governance can cto +13

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Associate Compliance Advisor

@ SAP | Budapest, HU, 1031

View on infosec-jobs.com

DevSecOps Engineer

@ Qube Research & Technologies | London

View on infosec-jobs.com

Software Engineer, Security

@ Render | San Francisco, CA or Remote (USA & Canada)

View on infosec-jobs.com

Associate Consultant

@ Control Risks | Frankfurt, Hessen, Germany

View on infosec-jobs.com

Senior Security Engineer

@ Activision Blizzard | Work from Home - CA

View on infosec-jobs.com