Log4j Archives - Securezoo

Oracle Critical Patch Update for July 2022

Database Security, Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / July 25, 2022 July 25, 2022 / CVE-2021-31805, CVE-2022-1292, CVE-2022-22721, CVE-2022-23305, CVE-2022-23632, CVE-2022-34169, Database, Log4j, MySQL, Oracle, Spring Framework

Oracle has released its Critical Patch Update for July 2022 to include 349 vulnerability fixes across multiple products. The updates also include fixes for Log4j and Spring Framework vulnerabilities.

Cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems (updated)

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / By Frank Crast / July 20, 2022 July 20, 2022 / APT, Aquatic Panda, CGCYBER, CISA, CVE-2021-44228, Cybersecurity Threat Center, Deep Panda, Log4j, log4Shell, UAG

The Cybersecurity and Infrastructure Security Agency (CISA) warns cyber actors continue to exploit Log4Shell vulnerability (CVE-2021-44228) in VMware Horizon Systems.

Millions of Java apps still vulnerable to Log4Shell

Vulnerabilities & Exploits / By Frank Crast / April 29, 2022 April 30, 2022 / Apache, CVE-2021-44228, Log4j, log4Shell, Rezilion

Researchers have found millions of Java applications still vulnerable in the wild to the infamous Log4Shell vulnerability CVE-2021-44228, more than four months after the severe flaw was discovered.

Deep Panda APT group launches new attacks against Log4Shell vulnerability to install Fire Chili rootkits

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / By Frank Crast / April 2, 2022 April 2, 2022 / APT, CVE-2021-44228, Deep Panda, FortiLabs, Log4j, log4Shell

In the past month, researchers from FortiLabs have detected a new cyber campaign involving Chinese Advanced Persistent Threat (APT) group Deep Panda that has exploited the Log4Shell (log4j) vulnerability CVE-2021-44228 on vulnerable VMware Horizon servers to install digitally signed Fire Chili rootkits.

SAP March 2022 Security Patch Day addresses 2 new Critical vulnerabilities

Security Updates & Patches, Uncategorized, Vulnerabilities & Exploits / By Frank Crast / March 8, 2022 March 13, 2022 / CVE-2021-44228, CVE-2022-24396, Log4j, log4Shell, SAP

Software giant SAP has released March 2022 Security Patch Day that includes 12 separate security advisories and patches, to include 1 Critical log4j vulnerability.

SAP February 2022 Security Patch Day addresses Critical log4j and ICMAD vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / February 11, 2022 February 11, 2022 / CVE-2021-44228, CVE-2022-22536, ICMAD, Log4j, log4Shell, SAP

Software giant SAP has released February 2022 Security Patch Day that includes 19 separate security advisories and patches, to include fixes for critical log4j and ICMAD vulnerabilities.

SAP January 2022 Security Patch Day addresses Critical and High risk vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / January 11, 2022 January 11, 2022 / ABAP, CVE-2021-44228, CVE-2022-22531, Log4j, SAP

Software giant SAP has released January 2022 Security Patch Day that includes nine separate security advisories and patches, three of those were updates to previously released patches from December.

Threat hunters discover Aquatic Panda Log4Shell exploit attempts

Cybersecurity Attacks, Vulnerabilities & Exploits / By Frank Crast / January 2, 2022 January 2, 2022 / Apache, APT, Aquatic Panda, CVE-2021-44228, Log4j, log4Shell

Threat hunters from CrowdStrike have discovered Aquatic Panda cyber gang using Log4Shell exploit tools in recent intrusion attempts against a customer.

Apache releases security update for another Log4j RCE vulnerability (CVE-2021-44832)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / December 30, 2021 December 30, 2021 / Apache, CVE-2021-44832, Log4j, RCE

The Apache Software Foundation has released a new security update to address another Log4j vulnerability (CVE-2021-44832) where Log4j2 is vulnerable to remote code execution (RCE) via JDBC Appender when an attacker controls a configuration file.

Apache releases new Log4k security update to fix another RCE vulnerability (CVE-2021-45046)

Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / December 20, 2021 December 30, 2021 / Apache, CVE_2021-44228, CVE-2021-45046, Log4j, log4Shell

As affected organizations and vendors continue to identify products affected by Log4Shell remote code execution (RCE) Log4j vulnerability, Apache has released additional Log4j security updates to fix another RCE vulnerability (CVE-2021-45046).