Apache Log4j Zero-Day Exploit

glaseye

https://www.pcmag.com/news/countless-serves-are-vulnerable-to-apache-log4j-zero-day-exploit

https://www.ncsc.nl/actueel/nieuws/2021/december/10/ernstige-kwetsbaarheid-in-apache-log4j

Let's just hope it does not go completely haywire...

I don't know which sites may use this software, but I guess we better be on guard.....

 

The Blurst of Times

Yeah, apparently this was/is a thing in Minecraft. People could just pop something up in chat, and you're scr00gled.

At first, I wondered if it was a Minecraft thing only, but apparently it's a Java zero day. Surprise, surprise (not).

https://www.xda-developers.com/log4j-security-vulnerability-minecraft-apple/

nonesuch00

Pretty difficult to protect all your data when the service providers, whether government, business, or NGO, don't take their customers' security serious enough.