Steve Povolny, head of advanced threat research for McAfee Enterprise and FireEye, said Log4Shell "now firmly belongs in the same conversation as Shellshock, Heartbleed, and EternalBlue." "Attackers ...

Researchers are warning that attackers are actively exploiting the newly publicized unauthenticated remote code execution vulnerability in Log4j, the Java-based logging tool from Apache. While the ...

Attackers trying to exploit the Log4j vulnerability have targeted almost 44% of corporate networks globally, according to Check Point. Wiz, the cloud security unicorn that discovered the Microsoft ...