corpus.blog
41,554 blogs · 4,819,422 posts Claim your blog
Record · corpus.blog/posts/01a0ef93-9f59-7013-a9e4-a021dfd30aac

CyberInSecurity – Ah Oh it’s Java time – log4j called Log4Shell – “dynamically” remote loading code or any other resources is ALWAYS a bad cybersec idea

dwaves.de · published 13 December 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dwaves.de Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
27
Words captured
961

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.tutorialspoint.com/log4j/log4j_overview.htm
tutorialspoint.com
https://duckduckgo.com/?q=Log4j+exploit
duckduckgo.com
https://venturebeat.com/tag/log4j-vulnerability/
venturebeat.com
https://venturebeat.com/2021/12/12/microsoft-log4j-exploits-extend-past-crypto-mining-to-outright-theft/
venturebeat.com
https://venturebeat.com/2021/12/13/log4j-exploits-suggest-attackers-gearing-up-for-ransomware/
venturebeat.com
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
tools.cisco.com
https://www.vmware.com/security/advisories/VMSA-2021-0028.html
vmware.com
https://access.redhat.com/security/vulnerabilities/RHSB-2021-009
access.redhat.com
https://github.com/YfryTchsGD/Log4jAttackSurface
github.com
https://www.cyberkendra.com/2021/12/worst-log4j-rce-zeroday-dropped-on.html
cyberkendra.com
https://blog.checkpoint.com/2021/12/11/protecting-against-cve-2021-44228-apache-log4j2-versions-2-14-1/
blog.checkpoint.com
https://www.cisa.gov/news/2021/12/17/cisa-issues-emergency-directive-requiring-federal-agencies-mitigate-apache-log4j
cisa.gov
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228
cve.mitre.org
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046
cve.mitre.org
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105
cve.mitre.org
https://www.govcert.ch/blog/zero-day-exploit-targeting-popular-java-library-log4j/
govcert.ch
https://www.tagesschau.de/inland/bsi-schadsoftware-103.html
tagesschau.de
https://web.archive.org/web/20211210193908/https://github.com/tangxiaofeng7/apache-log4j-poc
web.archive.org
https://logging.apache.org/log4j/2.x/index.html
logging.apache.org
https://thehackernews.com/2021/12/new-local-attack-vector-expands-attack.html
thehackernews.com
https://www.bleepingcomputer.com/news/security/new-zero-day-exploit-for-log4j-java-library-is-an-enterprise-nightmare/
bleepingcomputer.com
Understanding the Impact of Apache Log4j Vulnerability Read at the source ↗
security.googleblog.com
https://www.securityweek.com/google-finds-35863-java-packages-using-defective-log4j
securityweek.com
https://www.rumble.run/blog/finding-log4j/
rumble.run
https://www.golem.de/news/log4shell-mehrheit-der-java-pakete-hat-noch-kein-log4j-update-2112-161911.html
golem.de
https://www.bleepingcomputer.com/news/security/conti-ransomware-uses-log4j-bug-to-hack-vmware-vcenter-servers/
bleepingcomputer.com
https://www.rt.com/news/543825-belgium-military-cyber-attack/
rt.com
Elsewhere on dwaves.de (2)