Log4J Privacy & Security News

January 2023

• Security Vulnerability FAQ for Oracle Database and Fusion Middleware Products (Doc ID 1074055.1)

  Oracle

  Jan 26 2023

  https://support.oracle.com/knowledge/Middleware/1074055_1.html

• CVE-2021-44228 & CVE-2021-45046 - log4j vulnerability and APM Book Article ID: 230324

  Jan 26 2023

  https://knowledge.broadcom.com/external/article/230324/cve202144228-cve202145046-log4j-vulner.html

• Log4j Vulnerabilities Are Here to Stay — Are You Prepared? Don't make perfect the enemy of good in vulnerability management. Context is key — prioritize vulnerabilities that are actually exploitable. Act quickly if the vulnerability is on a potential attack path to a critical asset.

  Zur Ulianitzky

  Jan 25 2023

  https://www.darkreading.com/attacks-breaches/log4j-vulnerabilities-are-here-to-stay-are-you-prepared-

• Log4j Forever Changed What (Some) Cyber Pros Think About OSS

  Jan 23 2023

  https://securityintelligence.com/articles/log4j-vulnerability-changed-oss-cybersecurity/

• Don’t Get Complacent about Log4j

  Jan 5 2023

  https://www.syxsense.com/dont-get-complacent-about-log4j

• Expect ‘Headline-grabbing’ Log4j Attacks in 2023: Log4j bug will continue to be a critical issue for IT professionals in 2023

  Zachary Comeau

  Jan 4 2023

  https://mytechdecisions.com/it-infrastructure/expect-headline-grabbing-log4j-attacks-in-2023/

• ITRS - Vulnerability in Apache Log4j

  Jan 4 2023

  https://support.itrsgroup.com/hc/en-us/articles/4418094716817-Vulnerability-in-Apache-Log4j-

• Remembering Log4j vulnerability- Learnings and the way forward

  Narasimha Raju

  Jan 2 2023

  https://www.cxotoday.com/interviews/remembering-log4j-vulnerability-learnings-and-the-way-forward/

December 2022

• Lessons Learned: The Log4J Vulnerability 12 Months On

  Beth Maundrill

  Dec 29 2022

  https://www.infosecurity-magazine.com/news-features/log4j-vulnerability-12-months-on/

• The man whose Log4j scanner saved the day for users worldwide

  Dain Oh

  Dec 29 2022

  https://thereadable.co/the-man-whose-log4j-scanner-saved-the-day-for-users-worldwide/

• Log4j Exploit Attempts Continue 1 Year Later

  Roya Gordon

  Dec 29 2022

  https://www.nozominetworks.com/blog/log4j-exploit-attempts-continue-1-year-later/

• Finding the next Log4j – OpenSSF’s Brian Behlendorf on pivoting to a ‘risk-centred view’ of open source development

  Dec 29 2022

  https://portswigger.net/daily-swig/finding-nbsp-the-next-log4j-nbsp-openssfs-brian-behlendorf-on-pivoting-to-a-risk-centred-view-of-open-source-development

• One Year of Log4j. More than a year since it was first discovered, the Log4Shell vulnerability that attacks the Log4J logging library is still with us.

  Steven J. Vaughan-Nichols

  Dec 22 2022

  https://thenewstack.io/one-year-of-log4j/

• Log4Shell: The Log4j Vulnerability Emergency Clearly Explained

  Edward Kost

  Dec 21 2022

  https://www.upguard.com/blog/apache-log4j-vulnerability

• Which all software is affected by log4j shell vulnerability

  Anoop John

  Dec 16 2022

  https://www.zyxware.com/article/which-software-is-affected-by-log4j-shell-vulnerability

• Fusion’s Response to Log4j

  Dec 16 2022

  https://www.fusiongbs.com/log4j/

• Log4j: The Ghost of Christmas Future?

  Dec 16 2022

  https://solutionsreview.com/endpoint-security/log4j-the-ghost-of-christmas-future/

• Learn how to manage the Log4Shell vulnerability in Microsoft Defender

  Dec 15 2022

  https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-manage-log4shell-guidance?view=o365-worldwide

• Avoiding the Next Log4Shell: Learning from the Log4j Event, One Year Later

  Brian Behlendorf

  Dec 15 2022

  https://openssf.org/blog/2022/12/15/avoiding-the-next-log4shell-learning-from-the-log4j-event-one-year-later/

• Dell Response to Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228)

  Dec 14 2022

  https://www.dell.com/support/kbdoc/en-us/000194414/dell-response-to-apache-log4j-remote-code-execution-vulnerability

• Tidelift GC: Paid open source can stave off another Log4j. If the industry wants to thwart software supply chain attacks and prevent another Log4Shell, the way forward is to pay open source maintainers

  Stephanie Glen

  Dec 13 2022

  https://www.techtarget.com/searchsoftwarequality/news/252528323/Tidelift-CEO-Paid-open-source-can-stave-off-another-Log4j

• Trellix coverage for Apache Log4j CVE-2021-44228 Remote Code Execution

  Technical Articles ID: KB95091

  Dec 12 2022

  https://kcm.trellix.com/corporate/index?page=content&id=KB95091

• Log4j Vulnerability Explained

  Dec 2022

  https://carefulsecurity.com/log4j/

• One year on: Log4Shell’s Armageddon that never was

  Dec 11 2022

  https://cybernews.com/editorial/one-year-after-log4shell/

• Log4j’s Log4Shell Vulnerability: One Year Later, It’s Still Lurking

  Todd Livingston

  Dec 10 2022

  https://legacymedi4.com/log4js-log4shell-vulnerability-one-year-later-its-still-lurking/

• A Year Later, That Brutal Log4j Vulnerability Is Still Lurking

  Scott Marlette

  Dec 10 2022

  https://technewsboy.com/a-year-later-that-brutal-log4j-vulnerability-is-still-lurking

• A Year Later, That Brutal Log4j Vulnerability Is Still Lurking

  Despite mitigation, one of the worst bugs in internet history is still prevalent—and being exploited.

  Dec 10 2022

  https://www.wired.com/story/log4j-log4shell-one-year-later/

• Log4j: One Year Later

  Gabi Stapel

  Dec 9 2022

  https://securityboulevard.com/2022/12/log4j-one-year-later/

• Fear, panic and Log4j: One year later

  Fears of catastrophic cyberattacks have thus far failed to materialize. But federal authorities stress threat actors are playing the long game.

  Dec 9 2022

  https://www.cybersecuritydive.com/news/log4j-one-year-later/638416/

• One year later, the widespread Log4j threat lingers on

  Dec 9 2022

  https://www.axios.com/2022/12/09/log4j-year-anniversary-cybersecurity

• Arctic Wolf: Log4Shell Has a Long Tail

  Nancy Liu

  Dec 9 2022

  https://www.sdxcentral.com/articles/analysis/arctic-wolf-log4shell-has-a-long-tail/2022/12/

• Businesses urged to remain vigilant as Log4Shell issues persist one year on

  Thousands of businesses globally were targeted within just days of the vulnerability disclosure

  Ross Kelly

  Dec 9 2022

  https://www.itpro.co.uk/security/369684/businesses-urged-to-remain-vigilant-as-log4shell-issues-persist-one-year-on

• Local governments allegedly targeted with Iranian ‘Drokbk’ malware through Log4j vulnerability

  Jonathan Greig

  Dec 9 2022

  https://therecord.media/local-governments-allegedly-targeted-with-iranian-drokbk-malware-through-log4j-vulnerability/

• Number of vulnerable Log4j downloads remains high one year on

  Ian Barker

  Dec 9 2022

  https://betanews.com/2022/12/09/number-of-vulnerable-log4j-downloads-remains-high-one-year-on/

• Product Announcement: Yes, You Can Have a Software Bill of Materials (SBOM)!

  Chris Griffith

  Dec 8 2022

  https://securityboulevard.com/2022/12/product-announcement-yes-you-can-have-a-software-bill-of-materials-sbom/

• Log4j Vulnerability Detection: One year after Log4Shell, firms still struggle to hunt down Log4j

  Lisa Vaas

  Dec 8 2022

  https://securityboulevard.com/2022/12/log4j-vulnerability-detection-one-year-after-log4shell-firms-still-struggle-to-hunt-down-log4j-contrast-security/

• Balbix extends platform to include software bill of materials (SBOM) capabilities (press release)

  Dec 8 2022

  https://finance.yahoo.com/news/balbix-extends-platform-software-bill-140000798.html

• Optus, Medibank – and supply chains flying under the radar

  Eilon Elhadad

  Dec 7 2022

  https://securitybrief.com.au/story/optus-medibank-and-supply-chains-flying-under-the-radar

• LoNg4j Findings Confirm Log4j Vulnerability Patching Gaps

  Jason Kent

  Dec 6 2022

  https://securityboulevard.com/2022/12/long4j-findings-confirm-log4j-vulnerability-patching-gaps/

• Software Inefficiencies are Costing U.S. Economy Trillions, Study Says

  Vulnerabilities, software supply chain problems and technical debt could be costing the U.S. economy $2.4 trillions, Synopsys report finds.

  Dec 6 2022

  https://mytechdecisions.com/compliance/software-inefficiencies-are-costing-u-s-economy-trillions-study-says/

• BODs: Hot or not?

  Tim Starks & Aaron Schaffer

  Dec 6 2022

  https://www.washingtonpost.com/politics/2022/12/06/bods-hot-or-not/

• Tenable research finds 72% of organizations remain vulnerable to “nightmare” log4j vulnerability. According to the data collected from over 500 million tests, 72% of organizations remain vulnerable to the Log4Shell vulnerability as of October 1, 2022 (Press Release)

  Dec 5 2022

  https://www.zawya.com/en/press-release/research-and-studies/tenable-research-finds-72-of-organizations-remain-vulnerable-to-nightmare-log4j-vulnerability-wssykef1

• Tenable research finds 72% of organisations remain vulnerable to “nightmare” Log4j vulnerability

  Dec 5 2022

  https://www.tahawultech.com/news/tenable-research-finds-72-of-organisations-remain-vulnerable-to-nightmare-log4j-vulnerability/

• We are still failing to learn the most important lesson in cybersecurity. That needs to change, fast. We know the problems and the answers. So why do so few organisations act?

  Danny Palmer

  Dec 4 2022

  https://www.zdnet.com/article/we-are-still-failing-to-learn-the-most-important-lesson-in-cybersecurity-that-needs-to-change-fast/

• DHS board starts investigating Lapsus$ teen hacker group

  Dec 2 2022

  https://www.axios.com/2022/12/02/dhs-board-teen-hackers-lapsus

• DHS cyber board to examine hacking extortion group Lapsus$

  Dec 2 2022

  https://news.yahoo.com/dhs-cyber-board-examine-hacking-162254941.html

• Cybersecurity Insights with Contrast CISO David Lindner | 12/2

  David Lindner

  Dec 2 2022

  https://securityboulevard.com/2022/12/cybersecurity-insights-with-contrast-ciso-david-lindner-12-2/

• Cyber Safety Review Board to probe Lapsus$ ransomware spree

  Following an inaugural review of Log4j, the board will investigate the threat actor’s prolific campaign of cyber extortion against major companies, including Uber, T-Mobile and Nvidia.

  Dec 2 2022

  https://www.cybersecuritydive.com/news/cyber-safety-review-board-lapsus-ransomware/637855/

• 72% of organisations remain vulnerable to “nightmare” Log4j vulnerability: Study

  Dec 2 2022

  https://ciosea.economictimes.indiatimes.com/news/security/72-of-organisations-remain-vulnerable-to-nightmare-log4j-vulnerability-study/95904432

• DHS Cyber Safety Review Board to focus on Lapsus$ hackers

  Dec 2 2022

  https://www.cyberscoop.com/cybersecurity-review-board-lapsus/

• Tenable Research Finds 72% of Organizations Remain Vulnerable to “Nightmare” Log4j Vulnerability

  Dec 2 2022

  https://www.expresscomputer.in/news/tenable-research-finds-72-of-organizations-remain-vulnerable-to-nightmare-log4j-vulnerability/92407/

• Frasers Group heads off Log4j and streamlines acquisitions with endpoint security

  Gary Flood

  Dec 2 2022

  https://diginomica.com/frasers-group-heads-log4j-and-streamlines-acquisitions-endpoint-security

• Log4j one year in: Vulnerability fuels attacks — and a new urgency for software supply chain security

  Carolynn van Arsdale

  Dec 1 2022

  https://securityboulevard.com/2022/12/log4j-one-year-in-vulnerability-fuels-attacks-and-a-new-urgency-for-software-supply-chain-security/

• One Year After Log4Shell, Most Firms Are Still Exposed to Attack

  Though there have been fewer than expected publicly reported attacks involving the vulnerability, nearly three-quarters of organizations remain exposed to it.

  Dec 1 2022

  https://www.darkreading.com/application-security/one-year-later-log4shell-exposed-attack

• AWS Glue 4 Adds Pandas Support

  Kay Ewbank

  Dec 1 2022

  https://www.i-programmer.info/news/197-data-mining/15916-aws-glue-4-adds-pandas-support.html

• 72% of organisations remain vulnerable to Log4j vulnerability

  Shannon Williams

  Dec 1 2022

  https://itbrief.com.au/story/72-of-organisations-remain-vulnerable-to-log4j-vulnerability

November 2022

More Log4J news below this section, under the line.

But first, there were many news reports about the Iranian Log4J attack in November. See the different perspectives, and topics covered to compare and contrast how the news was covered through different outlets…

• Log4j vulnerability used by Iranian hackers to penetrate critical government networks

  Network operators just neglected the security patch

  Nov 20 2022

  http://www.theunfilteredlens.org/2022/11/20/log4j-vulnerability-used-by-iranian-hackers-to-penetrate-critical-government-networks/

• US Merit Systems Protection Board compromised in Iranian government-linked hack: report

  Nov 17 2022

  https://www.fedscoop.com/us-merit-systems-protection-board-iran/

• Another Log4Shell warning after Iranian attack on US government

  The breach of a US federal body by an Iranian threat actor exploiting the Adobe Log4j Log4Shell vulnerability has prompted a fresh flurry of patching

  Nov 17 2022

  https://www.computerweekly.com/news/252527375/Another-Log4Shell-warning-after-Iranian-attack-on-US-government

• CISA: Iranian APT actors compromised federal network

  CISA said Iranian nation-state actors exploited Log4Shell flaws on an unpatched VMware Horizon server before deploying a cryptominer and attempting to gain persistent access.

  Nov 17 2022

  https://www.techtarget.com/searchsecurity/news/252527391/CISA-Iranian-APT-actors-compromised-federal-network

• Iran’s state-sponsored hackers use Log4J to target US government

  A government department was breached using the common javascript vulnerability, CISA and the FBI have confirmed.

  Nov 17 2022

  https://techmonitor.ai/technology/cybersecurity/iran-cyberattack-us-government-log4shell

• Iran-backed group breaches US agency via Log4Shell, mines crypto

  Nov 17 2022

  https://thestack.technology/log4shell-crypto-breach-federal-agency-iran/

• Iranian compromise of federal network demonstrates enduring nature of Log4j

  Nov 17 2022

  https://www.scmagazine.com/analysis/malware/iranian-compromise-of-federal-network-demonstrates-enduring-nature-of-log4j

• Iranian hackers breached US govt agency, deploy crypto miner

  Nov 17 2022

  https://www.techradar.com/news/iranian-hackers-breached-us-govt-agency-deploy-crypto-miner

• Iranian hackers use Log4Shell to mine crypto on federal computer system

  Nov 16 2022

  https://www.cyberscoop.com/iranian-hackers-log4shell-crypto/

• Iranian hackers breach Federal Civilian Executive Branch using Log4Shell vulnerability

  Nov 16 2022

  https://siliconangle.com/2022/11/16/iranian-hackers-breach-federal-civilian-executive-branch-using-log4shell-vulnerability/

• US: Iranian Hackers Breached Government with Log4Shell

  Nov 16 2022

  https://www.infosecurity-magazine.com/news/us-iranian-hackers-government/

• Iranian cyberspies exploited Log4j to break into a US govt network

  It's the gift to cybercriminals that keeps on giving

  Nov 16 2022

  https://www.theregister.com/2022/11/16/iranian_cyberspies_log4j/

• Suspected Iranian APT accessed federal server via Log4j vulnerability

  Nov 16 2022

  https://therecord.media/suspected-iranian-apt-accessed-federal-server-via-log4j-vulnerability/

• Iran-backed hackers breached a US federal agency that failed to patch year-old bug

  Nov 16 2022

  https://techcrunch.com/2022/11/16/iran-hackers-federal-agency-log4shell/

• Gov’t Adds Open Source Security to Software Supply Chain

  Nov 16 2022

  https://securityboulevard.com/2022/11/govt-adds-open-source-security-to-software-supply-chain/

• US Gov Warning: Start Hunting for Iranian APTs That Exploited Log4j

  Nov 16 2022

  https://www.securityweek.com/us-gov-warning-start-hunting-iranian-apts-exploited-log4j

---

• Three-quarters of Organizations are Still Vulnerable to Log4Shell

  Tenable says organizations still need to be vigilant in remediating Log4Shell nearly a year after the bug's discovery.

  Nov 30 2022

  https://mytechdecisions.com/network-security/log4shell-log4j-vulnerability/

• One Year Later: Log4Shell Remediation Slow, Painful Slog

  Ryan Naraine

  Nov 30 2022

  https://www.securityweek.com/one-year-later-log4shell-remediation-slow-painful-slog

• Tenable: 72% of organizations remain vulnerable to Log4Shell

  New research shows the attack surface remains wide for the Log4j vulnerability, known as Log4Shell, which caused significant problems for organizations over the past year.

  Nov 30 2022

  https://www.techtarget.com/searchsecurity/news/252527814/Tenable-72-of-organizations-remain-vulnerable-to-Log4Shell

• Three out of four organizations are still vulnerable to Log4Shell

  Nov 30 2022

  https://betanews.com/2022/11/30/three-out-of-four-organizations-are-still-vulnerable-to-log4shell/

• Tenable finds widespread exposure to Log4j vulnerability, calls remediation efforts ‘an ongoing battle’

  Charlie Mitchell

  Nov 30 2022

  https://insidecybersecurity.com/daily-news/tenable-finds-widespread-exposure-log4j-vulnerability-calls-remediation-efforts-%E2%80%98-ongoing

• Software Supply Chain Security is Broader Than SolarWinds and Log4J - Latest Tweet by TechCrunch

  The latest Tweet by TechCrunch states, 'Software supply chain security is broader than SolarWinds and Log4J ...'

  Nov 30 2022

  https://www.latestly.com/socially/technology/software-supply-chain-security-is-broader-than-solarwinds-and-log4j-latest-tweet-by-techcrunch-2-4523747.html

• Tripwire Enterprise Use Cases – Advanced Monitoring

  Nov 29 2022

  https://www.tripwire.com/state-of-security/tripwire-enterprise-use-cases-advanced-monitoring

• Log4j: A Year in Review

  Nov 29 2022

  https://securityboulevard.com/2022/11/log4j-a-year-in-review/

• Software supply chain security is broader than SolarWinds and Log4J

  Nov 29 2022

  https://techcrunch.com/2022/11/29/software-supply-chain-security-is-broader-than-solarwinds-and-log4j/

• Small open source projects pose significant security risks

  Open source security initiatives might prevent large-scale vulnerabilities such as Log4j, but smaller projects pose risks without more maintainer support, industry experts say.

  Nov 28 2022

  https://www.techtarget.com/searchsoftwarequality/news/252527749/Small-open-source-projects-pose-significant-security-risks

• 2023 cybersecurity predictions: Business-critical applications increasingly at risk

  Nov 26 2022

  https://www.digitaljournal.com/business/2023-cybersecurity-predictions-business-critical-applications-increasingly-at-risk/article

• Exploit Tools and Targets: Log4j Continues to be Actively Exploited

  Nov 24 2022

  https://securityboulevard.com/2022/11/australia-seeks-to-disrupt-stop-cybercriminal-syndicates-with-new-task-force/

• Holiday Season Threat Awareness

  Nov 23 2022

  https://securityboulevard.com/2022/11/holiday-season-threat-awareness/

• Microsoft says attackers are hacking energy grids by exploiting decades-old software

  Nov 23 2022

  https://techcrunch.com/2022/11/23/microsoft-boa-server-energy-grids/

• Not patched Log4j yet? Assume attackers are in your network, say CISA and FBI

  Almost a year on from Log4j's disclosure, a joint alert by CISA and the FBI warns organizations that if they haven't protected their systems against it yet, they really need to now.

  Nov 17 2022

  https://www.zdnet.com/article/cybersecurity-warning-if-youve-not-patched-log4j-yet-assume-attackers-are-in-your-network/

• All Day DevOps: Third of Log4j downloads still pull vulnerable version despite threat of supply chain attacks

  Nov 14 2022 (updated Nov 24 2022)

  https://portswigger.net/daily-swig/all-day-devops-third-of-log4j-downloads-still-pull-vulnerable-version-despite-threat-of-supply-chain-attacks

• The Securing Open Source Software Act Is Good, but Whatever Happened to Legal Liability?

  Nov 10 2022

  https://www.lawfareblog.com/securing-open-source-software-act-good-whatever-happened-legal-liability

• Three ways security teams can foster open-source innovation

  Ankur Shah

  Nov 10 2022

  https://www.scmagazine.com/perspective/strategy/three-ways-security-teams-can-foster-open-source-innovation

October 2022

• CISA to infosec: here’s China’s hit-list, why haven’t you patched?

  Top-20 exploited vulnerabilities include 12 RCEs.

  Richard Chirgwin

  Oct 7 2022

  https://www.itnews.com.au/news/cisa-to-infosec-heres-chinas-hit-list-why-havent-you-patched-586173

• Top of the Pops: US authorities list the 20 hottest vulns that China's hackers love to hit

  Microsoft has four entries on list of shame, Log4j tops the chart

  Laura Dobberstein

  Oct 7 2022

  https://www.theregister.com/2022/10/07/us_spooks_reckon_these_are/

• RCE on Log4j Among Top CVEs Exploited By Chinese-Backed Hackers

  Kevin Poireault

  Oct 7 2022

  https://www.infosecurity-magazine.com/news/log4j-microsoft-exchange-cve/

• After Log4j and SolarWinds, CISA tells agencies to routinely scan networks for devices, potential bugs

  Justin Doubleday

  Oct 4 2022

  https://federalnewsnetwork.com/cybersecurity/2022/10/after-log4j-and-solarwinds-cisa-tells-agencies-to-routinely-scan-networks-for-devices-potential-bugs/

• Time for Security With the Open XDR Approach

  Samuel Jones

  Oct 4 2022

  https://securityboulevard.com/2022/10/time-for-security-with-the-open-xdr-approach/

• Software vulnerabilities can affect network infrastructure security

  Tammy Sewell

  Oct 4 2022

  https://oicanadian.com/software-vulnerabilities-can-affect-network-infrastructure-security/

• Hamden mayor estimates $500,000 cost to address spring cyberattack

  Meghan Friedmann

  Oct 4 2022

  https://www.middletownpress.com/news/article/Hamden-cyberattack-costs-500000-17484089.php

• How can scanning GitHub help secure the open source software supply chain?

  AARON ROTTENBERG

  OCT 3 2022

  https://list23.com/1081448-how-can-scanning-github-help-secure-the-open-source-software-supply-chain/

• Three questions and answers: why there are so many open source attacks now

  Oct 2 2022

  https://california18.com/three-questions-and-answers-why-there-are-so-many-open-source-attacks-now/7156942022/

September 2022

• Senators’ Plan to Secure Open Source Software Involves Agencies Using More of It

  Mariam Baksh

  Sept 30 2022

  https://www.nextgov.com/cybersecurity/2022/09/senators-plan-secure-open-source-software-involves-agencies-using-more-it/377930/

• New Cyber Bill Aims To Fix Open-Source Security in Government

  Jack M. Germain

  Sept 30 2022

  https://www.linuxinsider.com/story/new-cyber-bill-aims-to-fix-open-source-security-in-government-176676.html

• Cyber Defense Boosts Sought Under Senate Panel-Approved Bills

  Bloomberglaw

  Sept 28 2022

  https://news.bloomberglaw.com/tech-and-telecom-law/cyber-defense-boosts-sought-under-senate-panel-approved-bills

• Senate panel advances software security bill to create risk framework for agencies, critical infrastructure

  Sara Friedman

  Sept 28 2022

  https://insidecybersecurity.com/daily-news/senate-panel-advances-software-security-bill-create-risk-framework-agencies-critical

• Software vulnerabilities pose risk to network infrastructure

  IT pros need to require software bills of materials for the open source networking software used in their enterprises to guard against potential threats.

  John Burke (Network World)

  Sept 28 2022

  https://www.channelasia.tech/article/701882/software-vulnerabilities-pose-risk-network-infrastructure/

• China's infosec researchers obeyed Beijing and stopped reporting vulns ... or did they?

  Report finds increase in anonymous vuln reports

  Simon Sharwood

  Sept 27 2022

  https://www.theregister.com/2022/09/27/atlantic_council_china_vuln_research/

• Sens. Peters, Portman introduce Securing Open Source Software Act

  Chris Galford

  Sept 26 2022

  https://homelandprepnews.com/stories/78517-sens-peters-portman-introduce-securing-open-source-software-act/

• Despite What Some Vendors Say, Please Don’t Ignore Log4j

  Stephen Magill

  Sept 26 2022

  https://securityboulevard.com/2022/09/despite-what-some-vendors-say-please-dont-ignore-log4j/

• BSidesLV 2022 Lucky13 BreakingGround – Klaus Agnoletti’s ‘Detecting Log4J On A Global Scale Using Collaborative Security’

  Marc Handelman

  Sept 23 2022

  https://securityboulevard.com/2022/09/bsideslv-2022-lucky13-breakingground-klaus-agnolettis-detecting-log4j-on-a-global-scale-using-collaborative-security/

• Visibility into agencies’ digital terrain is key to identifying Log4j vulnerabilities

  Shawn Taylor

  Sept 23 2022

  https://federalnewsnetwork.com/commentary/2022/09/visibility-into-agencies-digital-terrain-is-key-to-identifying-log4j-vulnerabilities/

• Visibility into agencies’ digital terrain is key to identifying Log4j vulnerabilities

  Shawn Taylor

  Sept 23 2022

  https://federalnewsnetwork.com/commentary/2022/09/visibility-into-agencies-digital-terrain-is-key-to-identifying-log4j-vulnerabilities/

• BSidesLV 2022 Lucky13 BreakingGround – Klaus Agnoletti’s ‘Detecting Log4J On A Global Scale Using Collaborative Security’

  Marc Handelman

  Sept 23 2022

  https://securityboulevard.com/2022/09/bsideslv-2022-lucky13-breakingground-klaus-agnolettis-detecting-log4j-on-a-global-scale-using-collaborative-security/

• Optus breach exposes users to fraud: ACCC

  John Kidman and Peter Bodkin

  AAP

  Sept 22 2022

  https://www.perthnow.com.au/technology/security/laws-questioned-after-optus-cyber-attack-c-8328795

• Senators propose open source software risk framework in new bill

  FedScoop

  Sept 22 2022

  https://www.fedscoop.com/open-source-risk-framework-bill/

• Senators introduce a bill to protect open-source software

  Analysis by Tim Starks

  with research by Aaron Schaffer

  Sept 22 2022

  https://www.washingtonpost.com/politics/2022/09/22/senators-introduce-bill-protect-open-source-software/

• Optus breach exposes users to fraud: ACCC

  John Kidman and Peter Bodkin

  Sept 22 2022

  https://www.perthnow.com.au/technology/security/laws-questioned-after-optus-cyber-attack-c-8328795

• Senators introduce a bill to protect open-source software

  Tim Starks and Aaron Schaffer

  Sept 22 2022

  https://www.washingtonpost.com/politics/2022/09/22/senators-introduce-bill-protect-open-source-software/

• Agent-based vs. agentless security: Pros and cons

  Help Net Security

  Sept 21 2022

  https://www.helpnetsecurity.com/2022/09/21/agent-based-vs-agentless-security-pros-and-cons-video/

• Allies Warn of Iranian Ransom Attacks Using Log4Shell

  OODA Analysit

  Sept 19 2022

  https://www.oodaloop.com/briefs/2022/09/19/allies-warn-of-iranian-ransom-attacks-using-log4shell/

• A10 Networks reveal the best practices for preventing Botnet attacks

  MARK FORKER

  SEPT 19 2022

  https://www.tahawultech.com/insight/opinion/a10-networks-reveal-the-best-practices-for-preventing-botnet-attacks/

• International Law Enforcement Warns of Iran-backed Hacking Crews Targeting Critical Infrastructure. Iran-sponsored operatives target Fortinet FortiOS, Microsoft Exchange and VMware Horizon Log4j vulnerabilities.

  D. Howard Kass

  Sept 19 2022

  https://www.msspalert.com/mssp-alert/international-law-enforcement-warns-of-iran-backed-hacking-crews-targeting-critical-infrastructure/

• A10 Networks reveal the best practices for preventing Botnet attacks

  Mark Forker

  Sept 18 2022

  https://www.tahawultech.com/insight/opinion/a10-networks-reveal-the-best-practices-for-preventing-botnet-attacks/

• Allies Warn of Iranian Ransom Attacks Using Log4Shell

  Sept 16 2022

  https://www.infosecurity-magazine.com/news/allies-warn-iranian-ransom-attacks/

• Iran-backed APT actors utilize CVEs to carry out cyber attacks on critical infrastructure

  Carolynn van Arsdale

  Sept 16 2022

  https://securityboulevard.com/2022/09/iran-backed-apt-actors-utilize-cves-to-carry-out-cyber-attacks-on-critical-infrastructure/

• Security Concerns Causing Pullback in Open Source Data Science, Anaconda Warns

  Alex Woodie

  Sept 16 2022

  https://www.datanami.com/2022/09/16/security-concerns-causing-pullback-in-open-source-data-science-anaconda-warns/

• Preventing the Log4j exploit and Botnets from impacting your organisation

  Daniel Shepherd

  Sept 16 2022

  https://www.tahawultech.com/features/preventing-the-log4j-exploit-and-botnets-for-impacting-your-organisation/

• Log4j Vulnerability Exploited by Lazarus Hackers for Cyber Espionage; Targets Are Energy Companies Running VMware Horizon Servers

  Scott Ikeda

  Sept 16 2022

  https://www.cpomagazine.com/cyber-security/log4j-vulnerability-exploited-by-lazarus-hackers-for-cyber-espionage-targets-are-energy-companies-running-vmware-horizon-servers/

• CISA Recommends Automating Threat Testing to Prepare for Advanced Threats (US-CERT AA22-257A)

  Kaustubh Jagtap

  Sept 15 2022

  https://securityboulevard.com/2022/09/cisa-recommends-automating-threat-testing-to-prepare-for-advanced-threats-us-cert-aa22-257a/

• Iranian Cyber Actors Exploit Known Vulnerabilities to Extort U.S. Critical Infrastructure Organizations, Other Victims

  NSA/CSS Cybersecurity Advisory

  Sept 14 2022

  https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/3157562/iranian-cyber-actors-exploit-known-vulnerabilities-to-extort-us-critical-infras/

• Nearly one in two industry pros scaled back open source use over security fears

  Log4j being the main driver, this data science poll claims

  Thomas Claburn

  Sept 14 2022

  https://www.theregister.com/2022/09/14/snakes_on_a_plan_anaconda/

• August’s Top Malware: Emotet Knocked off Top Spot by FormBook while GuLoader and Joker Disrupt the Index

  Check Point Software Technologies INC

  Sept 14 2022

  https://www.yahoo.com/now/august-top-malware-emotet-knocked-100000806.html

• C2-as-a-Service Portal Dark Utilities Now Boasts Over 3,000 Criminal Subscribers

  Dark Utilities C2aaS enables remote access, command execution, distributed denial-of-service (DDoS) attacks and cryptocurrency mining operations.

  Sumeet Wadhwani

  Sept 13 2022

  https://www.spiceworks.com/it-security/threat-reports/news/dark-utilities-cyberattack-tool/

• NEVER AGAIN LOG4J: FREE TOOLS BAN OPEN SOURCE SECURITY GAPS

  Brian Adam

  Sept 13 2022

  https://voonze.com/never-again-log4j-free-tools-ban-open-source-security-gaps/

• Shields Up: North Korean State-Sponsored Lazarus Group Targets North American Energy Firms

  Gary Davis

  Sept 13 2022

  https://blogs.blackberry.com/en/2022/09/shields-up-north-korean-state-sponsored-lazarus-group-targets-american-energy-firms

• Energy providers hit by North Korea-linked Lazarus exploiting Log4j VMware vulnerabilities

  Cisco Talos researchers observed the advanced persistent threat actor infiltrating networks during a six-month campaign.

  Matt Kapko

  Sept 13 2022

  https://www.cybersecuritydive.com/news/energy-providers-log4j-vmware/631673/

August 2022

• Iranian state-sponsored Actors Exploiting Log4j 2 Flaws in Unpatched Systems

  GURUBARAN S

  Aug 30 2022

  https://gbhackers.com/exploiting-log4j-2-vulnerabilities/

• Microsoft: Iranian Threat Actor Exploits Log4j 2 Vulnerabilities in SysAid Apps

  The Microsoft Threat Intelligence Center offers recommendations to guard against Log4j 2 vulnerabilities in SysAid apps.

  Dan Kobialka

  Aug 29 2022

  https://www.msspalert.com/cybersecurity-breaches-and-attacks/microsoft-iranian-threat-actor-exploits-log4j-2-vulnerabilities-in-sysaid-apps/

• C&F breached via Log4J vulnerability as forensic investigation continues (subscription required)

  The RansomHouse hacking group was able to infiltrate specialty insurer Crum & Forster’s internal systems by exploiting an unpatched Log4J vulnerability, The Insurer can reveal.

  Aug 29 2022

  https://www.theinsurer.com/news/candf-breached-via-log4j-vulnerability-as-forensic-investigation-continues/24745.article

• Microsoft: Nation-state Iranian hackers exploit Log4Shell against Israel

  Daryna Antoniuk

  Aug 29 2022

  https://therecord.media/microsoft-nation-state-iranian-hackers-exploit-log4shell-against-israel/

• Government websites among those leaving Git files vulnerable to attack

  Amy Sarah John

  Aug 18 2022

  https://www.dailyhostnews.com/government-websites-among-those-leaving-git-files-vulnerable-to-attack

• Don't leave open source vulnerable to threats by leaving it open

  AMBER GIBSON

  Aug 18 2022

  https://list23.com/1023191-don-t-leave-open-source-vulnerable-to-threats-by-leaving-it-open/

• Compromise reports released for attacks exploiting Log4Shell in VMware Horizon

  Investigation by the federal agency shows not only the indicators of compromise but also the reasons why the Log4j vulnerability will persist indefinitely.

  Lucian Constantin

  Aug 02 2022

  https://sg.channelasia.tech/article/700318/compromise-reports-released-attacks-exploiting-log4shell-vmware-horizon-uag/

• Windows Defender hacked to deploy this dangerous ransomware

  Windows Defender is being abused to side-load LockBit 3.0

  Sead Fadilpašić

  Aug 01 2022

  https://www.techradar.com/news/windows-defender-hacked-to-deploy-this-dangerous-ransomware

July 2022

• What are SBOMs, and why do they exist?

  July 30 2022

  https://list23.com/994220-what-are-sboms-and-why-do-they-exist/

• CISA Releases Log4Shell-Related MAR US-CERT - CISA

  July 28 2022

  https://www.cisa.gov/uscert/ncas/current-activity/2022/07/28/cisa-releases-log4shell-related-mar-0

• Why the Log4Shell vulnerability will never become yesterday's news

  July 29 2022

  https://securityboulevard.com/2022/07/why-the-log4shell-vulnerability-will-never-become-yesterdays-news/

• Alberto Yepez on Twitter: "Log4j-on https://t.co/AvcwmCz50R via @YouTube

  https://mobile.twitter.com/alyepez/status/1489794632372260864

• CISA releases IOCs for attacks exploiting Log4Shell in VMware Horizon and UAG

  July 29 2022

  https://www.csoonline.com/article/3668652/cisa-releases-iocs-for-attacks-exploiting-log4shell-in-vmware-horizon-and-uag.html

• What Is the Log4j Vulnerability and Why It's NOT an Easy Fix

  July 26 2022

  https://americansecuritytoday.com/what-is-the-log4j-vulnerability-and-why-its-not-an-easy-fix/

• Log4j, Like COVID, is Endemic and Still Requires Attention

  July 26 2022

  https://www.rtinsights.com/log4j-like-covid-is-endemic-and-still-requires-attention/

• The Log4j Vulnerability: What Should Healthcare Organizations Do Next to Protect Patient Data?

  July 27 2022

  https://healthtechmagazine.net/article/2022/07/log4j-vulnerability-what-should-healthcare-organizations-do-next-protect-patient-data-perfcon

• New Alert from U.S. Government about “Endemic” Cyber Vulnerability

  July 26 2022

  https://www.jdsupra.com/legalnews/new-alert-from-u-s-government-about-2881912/

• Open-Xchange issues fixes for RCE, SSRF bugs in OX App Suite

  July 27 2022

  https://portswigger.net/daily-swig/open-xchange-issues-fixes-for-rce-ssrf-bugs-in-ox-app-suite

• We seem to have entered 'economic downturn'

  July 28 2022

  https://vigourtimes.com/we-seem-to-have-entered-economic-downturn/

• The Log4j Vulnerability: What Should Healthcare Organizations Do Next to Protect Patient Data?

  July 27 2022

  https://healthtechmagazine.net/article/2022/07/log4j-vulnerability-what-should-healthcare-organizations-do-next-protect-patient-data-perfcon

• Open-Xchange issues fixes for RCE, SSRF bugs in OX App Suite

  July 27 2022

  https://portswigger.net/daily-swig/open-xchange-issues-fixes-for-rce-ssrf-bugs-in-ox-app-suite

• What Is the Log4j Vulnerability and Why It's NOT an Easy Fix

  July 26 2022

  https://americansecuritytoday.com/what-is-the-log4j-vulnerability-and-why-its-not-an-easy-fix/

• New Alert from U.S. Government about “Endemic” Cyber Vulnerability

  July 26 2022

  https://www.jdsupra.com/legalnews/new-alert-from-u-s-government-about-2881912/

• Log4j, Like COVID, is Endemic and Still Requires Attention

  July 26 2022

  https://www.rtinsights.com/log4j-like-covid-is-endemic-and-still-requires-attention/

• Log4Shell Will Remain an Issue For a Decade

  July 25 2022

  https://mytechdecisions.com/network-security/log4shell-issue-decade/

• The Lawfare Podcast: Adkins and Alperovitch Talk About the Cyber Safety Review Board and Log4j

  July 25 2022

  https://www.lawfareblog.com/lawfare-podcast-adkins-and-alperovitch-talk-about-cyber-safety-review-board-and-log4j

• Log4j and the Role of SBOMs in Reducing Software Security Risk

  July 25 2022

  https://securityboulevard.com/2022/07/log4j-and-the-role-of-sboms-in-reducing-software-security-risk/

• In light Of The Log4j Incident, Google Supports Calls For Better Open Source Security

  July 25 2022

  https://www.opensourceforu.com/2022/07/in-light-of-the-log4j-incident-google-supports-calls-for-better-open-source-security/

May 2022

• Log4j is just the beginning – Secure your software with no-code DevOps orchestration

  SD Times

  May 31 2022

  https://sdtimes.com/security/log4j-is-just-the-beginning-secure-your-software-with-no-code-devops-orchestration/

• Security Bulletin: Multiple vulnerabilities in Apache Log4j affect IBM Cloud Pak System

  IBM

  May 30 2022

  https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-apache-log4j-affect-ibm-cloud-pak-system/

• Log4Shell: How friendly hackers rose to the challenge

  HackerOne CISO Chris Evans looks back at how the security community successfully rose to the challenge of Log4Shell, and saved end-user organisations millions

  Computer Weekly

  May 30 2022

  https://www.computerweekly.com/opinion/Log4Shell-How-friendly-hackers-rose-to-the-challenge

• Ransomware attack sends US county back to 1977

  Also: Uni details its malware-catching AI, signs of China poking the Russian cyber-bear, and more

  The Register

  May 29 2022

  https://www.theregister.com/2022/05/29/security_roundup/

• Log4j heightens security, resources divide between healthcare and other sectors

  SC Magazine

  May 19 2022

  https://www.scmagazine.com/feature/asset-management/log4j-heightens-security-resources-divide-between-healthcare-and-other-sectors

• Apache Log4j – Security Vulnerability Impact for HCL Common Local License Server

  HCL Software Customer Support

  May 9 2022

  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095517

• Apache Log4j Security Vulnerability Is STILL a Problem - What is it, Who Does it Impact, and Should I do Anything About It?

  Lexology

  May 4 2022

  https://www.lexology.com/library/detail.aspx?g=970e1f9f-505e-4da2-864f-16b061860def

• Hackers used the Log4j flaw to gain access before moving across a company's network, say security researchers

  State-backed hacking groups are some of the most advanced cyberattack operations in the world - but criminals don't need to rely on them if they can exploit unpatched cybersecurity flaws.

  ZDNet

  May 3 2022

  https://www.zdnet.com/article/heres-how-hackers-used-the-log4j-flaw-to-gain-access-before-moving-across-a-companys-network/

• Security Bulletin: A vulnerability in Apache Log4j affects IBM InfoSphere Information Server (CVE-2021-44228)

  IBM

  May 3 2022

  https://www.ibm.com/support/pages/security-bulletin-vulnerability-apache-log4j-affects-ibm-infosphere-information-server-cve-2021-44228-0

• How Log4j Reshaped Cloud Security Thinking

  Security Boulevard

  May 2 2022

  https://securityboulevard.com/2022/05/how-log4j-reshaped-cloud-security-thinking/

• Symantec Security Advisory for Log4j 2 Vulnerability for VIP Auth Hub

  Broadcom

  May 1 2022

  https://knowledge.broadcom.com/external/article/230768/symantec-security-advisory-for-log4j-2-v.html

April 2022

• Log4j flaw: Thousands of applications are still vulnerable, warn security researchers

  Cybersecurity researchers warn that insecure instances of Lo4j are still out there to be exploited - and are easy for attackers to discover.

  April 28 2022. ZDNet.

  https://www.zdnet.com/article/log4j-flaw-thousands-of-applications-are-still-vulnerable-warn-security-researchers/

• Security Teams Still Struggling to Patch Log4Shell

  April 28 2022. Michael Vizard. Security Boulevard.

  https://securityboulevard.com/2022/04/security-teams-still-struggling-to-patch-log4shell/

• Remote execution holes in Log4j, Exchange and Confluence lead Five Eyes 2021 exploited CVE list. Most exploited list topped by Log4Shell, ProxyShell, and ProxyLogon vulnerabilities.

  April 27 2022. ZDNet.

  https://www.zdnet.com/article/remote-execution-holes-in-log4j-exchange-and-confluence-lead-five-eyes-2021-exploited-cve-list/

• Long-running North Korean operation hacked into engineering firm, Symantec says

  April 27 2022. Joe Warminsky. The Record.

  https://therecord.media/north-korea-hackers-stonefly-symantec/

• Log4j Attack Surface Remains Massive. Four months after the Log4Shell vulnerability was disclosed, most affected open source components remain unpatched, and companies continue to use vulnerable versions of the logging tool.

  April 26 2022. Jai Vijayan. Threat Intelligence.

  https://www.darkreading.com/threat-intelligence/l0g4j-attack-surface-remains-huge

• Public interest in Log4Shell fades but attack surface remains

  April 26 2022. Bill Toulas. Bleeping Computer.

  https://www.bleepingcomputer.com/news/security/public-interest-in-log4shell-fades-but-attack-surface-remains/

• Amazon's Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug

  April 21 2022. Ravie Lakshmanan. The Hacker News.

  https://thehackernews.com/2022/04/amazons-hotpatch-for-log4j-flaw-found.html

• AWS Confirms Log4j Hotpatch Fix Leads to Privilege Escalation

  April 21 2022. Rabia Noureen. PETRI.

  https://petri.com/aws-log4j-hotpatch-fix-privilege-escalation/

• Combat zero-day attacks: 6 steps

  Be knowledgeable and proactive, and have a plan to face zero-day vulnerabilities.

  April 20 2022. John Cuneo. Credit Union National Association (CUNA) News.

  https://news.cuna.org/articles/120840-combat-zero-day-attacks-6-steps

• AWS's Log4j patches blew holes in its own security

  Remote code exec is so 2014. Have this container escape and privilege escalation, instead

  April 20 2022. Jessica Lyons Hardcastle. The Register.

  https://www.theregister.com/2022/04/20/aws_log4j_patches/

• Reported Apache Log4j Hotpatch Issues.

  AWS. Initial Publication: April 19 2022

  CVE IDs: CVE-2021-3100, CVE-2021-3101, CVE-2022-0070, CVE-2022-0071

  https://aws.amazon.com/security/security-bulletins/AWS-2022-006/

• Cyber Insurance Changes in the Aftermath of Log4j

  April 7 2022. Lynda Bennett, Ken Fishkin. Lowenstein Sandler LLP

  https://www.jdsupra.com/legalnews/cyber-insurance-changes-in-the-aftermath-39456/

• What Log4j Can Teach Us About Cloud Security

  By more securely configuring our cloud environments, we block bad actors from exploiting vulnerabilities.

  April 6 2022. eWeek.

  https://www.eweek.com/cloud/what-log4j-can-teach-us-about-cloud-security/

• Experts Warn Defenders: Don't Relax on Log4j

  April 01, 2022. Kevin Townsend. Security Week.

  https://www.securityweek.com/experts-warn-defenders-dont-relax-log4j

• Chinese Hackers Target VMware Horizon Servers with Log4Shell to Deploy Rootkit

  April 01 2022. Ravie Lakshmanan. The Hacker News.

  https://thehackernews.com/2022/04/chinese-hackers-target-vmware-horizon.html

March 2022

• Spring4Shell vulnerability could have ‘a larger impact’ than Log4j

  March 31 2022. Ryan Daws. Developer-Tech.

  https://www.developer-tech.com/news/2022/mar/31/spring4shell-vulnerability-could-larger-impact-log4j/

• VMware Horizon platform pummeled by Log4j-fueled attacks

  Miscreants deployed cryptominers, backdoors since late December, Sophos says

  March 30 2022. Jeff Burt. The Register.

  https://www.theregister.com/2022/03/30/log4j-malware-sophos-vmware-horizon/

• How to Prevent the Next Log4j-Style Zero-Day Vulnerability

  An interactive static analyzer gives developers information on potential risks arising from user inputs while they code. This could be a game-changer.

  March 30 2022. Asaf Karas. DARK Reading.

  https://www.darkreading.com/dr-tech/how-to-prevent-the-next-log4j-style-zero-day-vulnerability

• Log4JShell Used to Swarm VMware Servers with Miners, Backdoors

  March 29 2022. Lisa Vaas. ThreatPost.

  https://threatpost.com/log4jshell-swarm-vmware-servers-miners-backdoors/179142/

• Red Flag for Ransomware: Attackers Are Using the Log4Shell Vulnerability to Deliver Backdoors to Virtual Servers, Sophos Research Shows.

  Sophos Finds Three Backdoors, Possibly Delivered by Initial Access Brokers, and Four Cryptominers Targeting Unpatched VMware Horizon Servers

  March 29 2022. Sophos Inc.

  https://www.globenewswire.com/news-release/2022/03/29/2411877/0/en/Red-Flag-for-Ransomware-Attackers-Are-Using-the-Log4Shell-Vulnerability-to-Deliver-Backdoors-to-Virtual-Servers-Sophos-Research-Shows.html

• Log4j Attacks Continue Unabated Against VMware Horizon Servers

  Threat actors are exploiting the vulnerability to drop Web shells and cryptominers, security vendor says.

  March 29 2022. Jai Vijayan. Threat Intelligence.

  https://www.darkreading.com/vulnerabilities-threats/log4j-attacks-continue-unabated-against-vmware-horizon-servers

• 30% of Log4j instances still remain vulnerable, with open source apps a major hurdle

  March 18 2022

  https://www.scmagazine.com/analysis/cloud-security/30-of-log4j-instances-still-remain-vulnerable-with-open-source-apps-a-major-hurdle

• Linux botnet exploits Log4j flaw to hijack Arm, x86 systems

  On a plus side, their code's not very good

  March 16 2022

  https://www.theregister.com/2022/03/16/linux_botnet_log4j/

• New Linux backdoor that propagates via Log4j vulnerability easy to exploit in the cloud

  March 16 2022

  https://www.scmagazine.com/news/cloud/new-linux-backdoor-that-propagates-via-log4j-vulnerability-easy-to-exploit-in-the-cloud%EF%BF%BC

• Cloudflare freebie will help customers shield against the next Log4j

  March 16 2022

  https://www.techradar.com/news/cloudflare-freebie-will-help-customers-shield-against-the-next-log4j

• As Log4j Continues to Remind Us, What's Old Is New Again

  We need to focus on the bad guys and their methods instead of playing whack-a-mole with indicators of compromise.

  March 15 2022

  https://www.darkreading.com/vulnerabilities-threats/as-log4j-continues-to-remind-us-what-s-old-is-new-again

• New Linux botnet exploits Log4J, uses DNS tunneling for comms

  March 15 2022

  https://www.bleepingcomputer.com/news/security/new-linux-botnet-exploits-log4j-uses-dns-tunneling-for-comms/

• Log4j Security Hole Found In OmniFind Text Search Server

  March 14 2022

  https://www.itjungle.com/2022/03/14/log4j-security-hole-found-in-omnifind-text-search-server/

• GreyNoise launches free tool to protect against ‘scary’ vulnerabilities like Log4j

  March 14 2022

  https://venturebeat.com/2022/03/14/greynoise-launches-free-tool-to-protect-against-scary-vulnerabilities-like-log4j/

• How Companies Can Prepare For The Next Log4j

  March 11 2022

  https://www.forbes.com/sites/forbestechcouncil/2022/03/11/how-companies-can-prepare-for-the-next-log4j/?sh=2d8a859363a3

• Safeguarding Your ICS Against the Log4j Vulnerability

  Although no information about industrial control systems being breached via Log4j has yet been made public, the threat exists.

  March 11 2022

  https://www.automationworld.com/TakeFive/video/22106276/industrial-control-systems-and-the-log4jlog4shell-vulnerability

• Major Government Attack Highlights How Log4j is Still Unresolved

  March 11 2022

  https://securityboulevard.com/2022/03/major-government-attack-highlights-how-log4j-is-still-unresolved/

• FTC Warns Companies to Fix Vulnerabilities Associated with Log4j

  March 10 2022

  https://www.jdsupra.com/legalnews/ftc-warns-companies-to-fix-3049131/

• Over 40% of Log4j Downloads Are Vulnerable Versions of the Software

  The data point is a reminder of why fixing the widespread vulnerability will take a long time.

  March 10 2022

  https://www.darkreading.com/vulnerabilities-threats/three-months-later-41-of-log4j-downloads-are-of-vulnerable-versions

• The Lessons Of Log4J: It May Seem Like Last Year’s News, But Don't Ignore The Implications Of This Attack

  March 9 2022

  https://www.forbes.com/sites/forbestechcouncil/2022/03/09/the-lessons-of-log4j-it-may-seem-like-last-years-news-but-dont-ignore-the-implications-of-this-attack/?sh=3b28cfa320c7

• China’s APT41 exploited Log4j within hours

  APT41 compromised multiple government organisations via the Log4Shell exploit within hours of its initial disclosure, Mandiant claims

  March 9 2022

  https://www.computerweekly.com/news/252514376/Chinas-APT41-exploited-Log4j-within-hours

• Within hours of the Log4j flaw being revealed, these hackers were using it

  Cybersecurity researchers at Mandiant detail a hacking campaign designed to gain persistent access to networks.

  March 8 2022

  https://www.zdnet.com/article/within-hours-of-the-log4j-flaw-being-revealed-these-hackers-were-using-it/

• Mandiant reminds us: Don’t forget about Log4j

  March 8 2022

  https://venturebeat.com/2022/03/08/mandiant-reminds-us-dont-forget-about-log4j/

• Hackers continue to target unpatched systems with Log4j vulnerabilities: Barracuda

  Log4j is a very common logging library used by applications across the world. Logging lets developers see all the activity of an application.

  March 8 2022

  https://indianexpress.com/article/technology/tech-news-technology/hackers-continue-to-target-unpatched-systems-with-log4j-vulnerabilities-barracuda-7807205/

• CISO expert on TEFCA, Log4j, the cloud and limited security budgets

  March 8 2022

  https://www.healthcareitnews.com/news/ciso-expert-tefca-log4j-cloud-and-limited-security-budgets

• Is Log4j relevant to ERP managers? Yes, and we should prepare for the next security hack now

  March 7 2022

  https://diginomica.com/log4j-relevant-erp-managers-prepare-next-security-hack

• Log4j Vulnerabilities: Over 80% of Exploitation Attempts Originated in the U.S.

  Since the Log4j vulnerabilities were discovered in December 2021, 83% of infiltration attempts for cryptomining, ransomware, and DDoS attacks originated in the U.S.

  March 4 2022

  https://www.toolbox.com/it-security/threat-reports/news/log4j-vulnerabilities-exploitation-attempts/

• After a Busy December, Attacks on Log4j Vulnerability Dropped

  While attackers and researchers shift their attention to the next new vulnerability, security teams make sure they finish patching vulnerable Log4j versions in their applications and services.

  March 4 2022

  https://www.darkreading.com/edge-threat-monitor/after-a-busy-december-attacks-on-log4j-vulnerability-dropped

• Security leaders want legal action for failing to patch for Log4j

  March 2 2022

  https://www.helpnetsecurity.com/2022/03/02/log4j-vulnerability-security-professionals/

• Log4J: Microsoft discovers attackers targeting undisclosed SolarWinds vulnerability

  Microsoft said it discovered previously undisclosed issues with the SolarWinds Serv-U software while looking for Log4J vulnerabilities.

  Jan 21 2022

  https://www.zdnet.com/search/?o=1&q=log4j#:~:text=Log4J%3A%20Microsoft%20discovers,for%20Log4J%20vulnerabilities.

• Log4J: Attackers continue targeting VMware Horizon servers

  VMware has urged customers to apply the latest guidance as a way to resolve vulnerabilities CVE-2021-44228 and CVE-2021-4504.

  Jan 22 2022

  https://www.zdnet.com/article/log4j-attackers-continue-targeting-vmware-horizon-servers/

• Top three questions about the Log4j vulnerability

  Singapore’s Ensign Infosecurity answers the top three questions about the impact of the Log4j vulnerability

  Jan 17 2022

  https://www.computerweekly.com/news/252512071/Top-three-questions-about-the-Log4j-vulnerability

• Lesson from Log4j: Open-source software improvements need help from feds

  The tech industry is readying solutions to the security risks posed by the collaborative software that underpins modern-day computing — but aid from Washington could be essential to the project’s success.

  Jan 6 2022

  https://www.politico.com/news/2022/01/06/open-source-software-help-526676

• Currently, it scans a given set of directories for JAR, WAR, ZIP, or EAR files, then scans for files therein matching a known set of checksums.

  Jan 10 2022

  https://github.com/CrowdStrike/CAST

• The FTC Wants Companies to Find Log4j Fast. It Won't Be Easy

  The critical vulnerability is buried among endless open source code, and many cyber experts are stumped.

  Jan 10 2022

  https://www.wired.com/story/lo4j-ftc-vulnerability/?bxid=5bea05b23f92a404693eb6f5&cndid=32214863&esrc=AUTO_PRINT&source=EDT_WIR_NEWSLETTER_0_DAILY_ZZ&utm_brand=wired&utm_campaign=aud-dev&utm_content=WIR_Daily_011022&utm_mailing=WIR_Daily_011022&utm_medium=email&utm_source=nl&utm_term=P1

• Apache Log4j Meets Optiv MXDR

  Since mid-December, enterprises globally have been responding to the urgency of the Apache Log4j zero-day vulnerability. John Ayers of Optiv discusses Optiv MXDR and how it helps customers detect, respond and provide visibility to protect from potential exploits.

  Dec 22 2022

  https://www.healthcareinfosecurity.com/apache-log4j-meets-optiv-mxdr-a-18182

• Log4j and the problem with trusting open source

  Open source isn't the issue — companies need mechanisms to ensure the integrity of the software and code they adopt.

  Dec 20 2021

  https://www.cybersecuritydive.com/news/log4j-open-source-vulnerability/611784/

• Log4j software bug: CISA issues emergency directive to federal agencies

  Casual computer users have probably never heard of this logging software, but it's used across the entire internet.

  Dec 17 2021

  https://www.cnet.com/tech/services-and-software/log4j-software-bug-cisa-issues-emergency-directive-to-federal-agencies/

• TellYouThePass ransomware revived in Linux, Windows Log4j attacks

  Dec 17 2021

  https://www.bleepingcomputer.com/news/security/tellyouthepass-ransomware-revived-in-linux-windows-log4j-attacks/

• Log4j software bug: CISA issues emergency directive to federal agencies

  Casual computer users have probably never heard of this logging software, but it's used across the entire internet.

  Dec 17 2021

  https://www.cnet.com/tech/services-and-software/log4j-software-bug-cisa-issues-emergency-directive-to-federal-agencies/

• TellYouThePass ransomware revived in Linux, Windows Log4j attacks

  Dec 17 2021

  https://www.bleepingcomputer.com/news/security/tellyouthepass-ransomware-revived-in-linux-windows-log4j-attacks/

• The Next Wave of Log4J Attacks Will Be Brutal

  So far, Log4Shell has resulted mostly in cryptomining and a little espionage. The really bad stuff is just around the corner.

  Dec 16 2021 03:41 PM

  https://www.wired.com/story/log4j-log4shell-vulnerability-ransomware-second-wave/

• The Next Wave of Log4J Attacks Will Be Brutal

  So far, Log4Shell has resulted mostly in cryptomining and a little espionage. The really bad stuff is just around the corner.

  Dec 16 2021

  https://www.wired.com/story/log4j-log4shell-vulnerability-ransomware-second-wave/

• Massive open-source flaw has put millions of systems at risk

  Dec 15, 2021

  https://www.axios.com/log4j-open-source-cybersecurity-flaw-de938d32-4e0c-4f29-ac4d-abbee71dca91.html

• Log4j: Is There Such a Thing as ‘Too Much’ Open Source?

  Dec 15 2021

  https://devops.com/log4j-is-there-such-a-thing-as-too-much-open-source/

• Protect Your IoT Devices from Log4j 2 Vulnerability

  Dec 15 2021

  https://live.paloaltonetworks.com/t5/blogs/protect-your-iot-devices-from-log4j-2-vulnerability/ba-p/453381

• FBI Statement on Log4j Vulnerability

  December 15, 2021

  https://www.fbi.gov/news/pressrel/press-releases/fbi-statement-on-log4j-vulnerability

• Protect Your IoT Devices from Log4j 2 Vulnerability

  Dec 15 2021

  https://live.paloaltonetworks.com/t5/blogs/protect-your-iot-devices-from-log4j-2-vulnerability/ba-p/453381

• FBI Statement on Log4j Vulnerability

  Dec 15 2021

  https://www.fbi.gov/news/pressrel/press-releases/fbi-statement-on-log4j-vulnerability

• Companies scramble to defend against newly discovered 'Log4j' digital flaw

  Dec 14 2021

  https://www.npr.org/2021/12/14/1064123144/companies-scramble-to-defend-against-newly-discovered-log4j-digital-flaw

• Log4j zero-day flaw: What you need to know and how to protect yourself

  The Log4j vulnerability affects everything from the cloud to developer tools and security devices. Here's what to look for, according to the latest information.

  Dec 14 2021

  https://www.zdnet.com/article/log4j-zero-day-flaw-what-you-need-to-know-and-how-to-protect-yourself/

• Companies scramble to defend against newly discovered 'Log4j' digital flaw

  Dec 14 2021

  https://www.npr.org/2021/12/14/1064123144/companies-scramble-to-defend-against-newly-discovered-log4j-digital-flaw

• Log4j zero-day flaw: What you need to know and how to protect yourself

  The Log4j vulnerability affects everything from the cloud to developer tools and security devices. Here's what to look for, according to the latest information.

  Dec 14 2021

  https://www.zdnet.com/article/log4j-zero-day-flaw-what-you-need-to-know-and-how-to-protect-yourself/

• Log4j vulnerability explained: Prevent Log4Shell RCE by updating to version 2.16.0

  Dec 10 2021

  https://snyk.io/blog/log4j-rce-log4shell-vulnerability-cve-2021-4428/

• Severe Apache Log4j Vulnerability Threatens Enterprise Apps

  Unauthenticated RCE Vulnerability Could Affect 'Thousands of Organizations'

  Dec 10 2021  

  https://www.bankinfosecurity.com/severe-apache-log4j-vulnerability-threatens-enterprise-apps-a-18101

• ‘The Internet Is on Fire’

  A vulnerability in the Log4j logging framework has security teams scrambling to put in a fix.

  Dec 10 2021

  https://www.wired.com/story/log4j-flaw-hacking-internet/

• Log4j vulnerability explained: Prevent Log4Shell RCE by updating to version 2.16.0

  Dec 10 2021

  https://snyk.io/blog/log4j-rce-log4shell-vulnerability-cve-2021-4428/

• Severe Apache Log4j Vulnerability Threatens Enterprise Apps

  Unauthenticated RCE Vulnerability Could Affect 'Thousands of Organizations'

  Dec 10 2021

  https://www.bankinfosecurity.com/severe-apache-log4j-vulnerability-threatens-enterprise-apps-a-18101