Waratek combines a Log4J Vulnerability Scanner and API security in its Java Security Platform to provide users with the ability to scale strategic risk mitigation in the enterprise.

A new Apache Log4j vulnerability and a major attack on a military body using Log4Shell have come to light as security teams work to patch.

Researchers in China have also seen the TellYouThePass ransomware used in Log4j attacks on Windows and Linux devices.

Microsoft is looking into reports that the Apache Log4j vulnerability scanner in Defender for Endpoint is triggering false positive alerts.

Log4Shell ain't over until it's over, warns the US review board tasked with investigating the critical Apache Log4J flaw known as Log4Shell.

Keep reading. Ditch Log4j 2.15: DNS exfiltration & RCE possible Log4j 2.15.0 might contain even more severe vulnerabilities than the ones discovered so far, which is why 2.16.0 is by far a safer bet.

The big news this week is Log4j, breaking just a few hours too late to be included in last week’s column. Folks are already asking if this is the most severe vulnerability ever, and it does l… ...