Remove log4j-vulnerabilities-overview
article thumbnail

Lacework Labs Identifies Log4J Attacks

Lacework

Overview Lacework Labs is constantly monitoring for attackers adopting new vulnerabilities into their toolkits through their honeypots. Lacework Labs has identified opportunistic attackers leveraging the recent Log4J vulnerability (CVE-2021-22448). This vulnerability is being felt by every [.].

136
136
article thumbnail

Log4j Attacks – A Week in Review

Lacework

Key Takeaways Log4J Vulnerabilities (CVE-2021-44228, CVE-2021-45046) are being exploited by opportunistic attackers. Overview A week into the Log4J vulnerability that’s impacting just about every industry, there’s been patching, re-patching, and more adoption of this vulnerability by attackers.

article thumbnail

Software supply chain: What it is and how to keep it secure

CircleCI

As shortages of consumer goods and rising prices caused by bottlenecks in international supply networks have become more common, the global supply chain and its vulnerabilities have been top of mind for many. At least four prominent attacks — SolarWinds, Codecov, Kaseya, and Log4j — occurred in 2021 alone.