article thumbnail

Log4j 2 Vulnerability: Identifying and Minimizing Production Risk

Dynatrace

This means that an attacker with control over a string that gets passed to the log4j 2 logger can trick the application into requesting a resource from a server under the attacker’s control, then load it, and then execute it. Public Internet Exposure. Application List – Which applications use these libraries? Sensitive Data Access.

Java 240
article thumbnail

What is Log4Shell? The Log4Shell vulnerability explained (and what to do about it)

Dynatrace

Since December 10, days after a critical vulnerability known as Log4Shell was discovered in servers supporting the game Minecraft, millions of exploit attempts have been made of the Log4j 2 Java library, according to one team tracking the impact, with potential threat to millions more applications and devices across the globe. Dynatrace news.

Internet 261
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Log4Shell vulnerability: Identifying and minimizing production risk

Dynatrace

This means that an attacker with control over a string that gets passed to the log4j 2 logger can trick the application into requesting a resource from a server under the attacker’s control, then load it, and then execute it. Public Internet Exposure. Application List – Which applications use these libraries? Sensitive Data Access.

Java 185
article thumbnail

Application vulnerabilities: Important lessons from the OWASP top 10 about application security risks

Dynatrace

This method involves providing the lowest level of access by default, deleting inactive accounts, and auditing server activity. For example, ensuring software stacks don’t use default accounts or passwords, error handling doesn’t reveal sensitive information, and application server frameworks use secure settings.

article thumbnail

Take the SQL Server Mac challenge

SQL Server According to Bob

When I joined Microsoft in 1993, I would embark on a 25 year journey working only on Windows laptops and Windows Server computers. Last October we released SQL Server 2017 including support for Linux and Docker Containers. So here in this blog post, I will show you my journey in taking the SQL Server Mac Challenge.

Servers 40
article thumbnail

Tuning SQL Server Reporting Services

SQL Performance

Many database administrators find themselves having to support instances of SQL Server Reporting Services (SSRS), or at least the backend databases that are required for SSRS. These topics apply to both SQL Server Reporting Services as well as Power BI Report Server. Installation and support of SSRS can be confusing.

Tuning 67
article thumbnail

Media Query & Asset Downloading Results

Tim Kadlec

A little while back, I mentioned I was doing some research for the book about how images are downloaded when media queries are involved. The same as with the first test: every browser tested, aside from Opera Mini and Opera Mobile, will download the image. x will download both images if the device pixel ratio is above or equal to 1.5

Media 75