Sun.Dec 12, 2021

article thumbnail

Log4j 2 Vulnerability: Identifying and Minimizing Production Risk

Dynatrace

Dynatrace news. Log4Shell, a zero-day exploit affecting the popular Apache package was made public on December 9, 2021. The National Vulnerability Database describes the exploit here. It results in remote code execution (RCE) by submitting a specially composed request. This means that an attacker with control over a string that gets passed to the log4j 2 logger can trick the application into requesting a resource from a server under the attacker’s control, then load it, and then execute it.

Java 238
article thumbnail

AWS Went Down. Now What?

Professor Beekums

Amazon Web Services went down last Tuesday. It doesn’t happen often, but it is a harrowing experience when it does. Understandably, people get angry during these times. They have come to rely on AWS to provide services necessary for their business. Who isn’t going to be angry when their business stops because of something they can’t control?

AWS 118
article thumbnail

Log4Shell vulnerability: Identifying and minimizing production risk

Dynatrace

Dynatrace news. Log4Shell, a zero-day vulnerability affecting the popular Apache package was made public on December 9, 2021. The National Vulnerability Database describes the vulnerability here. It results in remote code execution (RCE) by submitting a specially composed request. This means that an attacker with control over a string that gets passed to the log4j 2 logger can trick the application into requesting a resource from a server under the attacker’s control, then load it, and then exec

Java 182