BleepingComputer

Upgraded to log4j 2.16? Surprise, there's a 2.17 fixing DoS

All set for the weekend? Not so fast. Yesterday, BleepingComputer summed up all the log4j and logback CVEs known thus far. Ever since the critical log4j zero-day saga started last week, security ...
BleepingComputer

New zero-day exploit for Log4j Java library is an enterprise nightmare

Proof-of-concept exploits for a critical zero-day vulnerability in the ubiquitous Apache Log4j Java-based logging library are currently being shared online, exposing home users and enterprises alike ...
Hacker

The CRITICAL Log4j Java Vulnerability: How to Detect and Mitigate It

Apache Log4j is a java based fast, reliable and flexible logging framework. There are a wide range of frameworks, applications, and tools that leverage Log4j such as Apache Struts2, Apache Solr, ...
SecurityWeek

Problematic Log4j Functionality Disabled as More Security Issues Come to Light

Developers of the widely used Apache Log4j Java-based logging tool have disabled problematic functionality as more security issues have come to light. Developers of the widely used Apache Log4j ...
GitHub

log4j-finder

log4j-finder identifies log4j2 libraries on your filesystem using a list of known bad and known good MD5 hashes of specific files (currently only JndiManager.class) present in log4j2-core-* packages; ...