article thumbnail

What is Log4Shell? The Log4Shell vulnerability explained (and what to do about it)

Dynatrace

Since December 10, days after a critical vulnerability known as Log4Shell was discovered in servers supporting the game Minecraft, millions of exploit attempts have been made of the Log4j 2 Java library, according to one team tracking the impact, with potential threat to millions more applications and devices across the globe.

Internet 261
article thumbnail

Dynatrace strengthens container security across popular cloud-based registries

Dynatrace

Cloud-native CI/CD pipelines and build processes often expose Kubernetes to attack vectors via internet-sourced container images. This correlation ensures that Dynatrace software components are versioned exactly the same way for both containerized and non-containerized workloads.

Cloud 212
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Protect your organization against zero-day vulnerabilities

Dynatrace

Zero day refers to security vulnerabilities that are discovered in software when teams had “zero days” to work on an update or a patch to remediate the issue and, hence, are already at risk. If a malicious attacker can identify a key software vulnerability, they can exploit the vulnerability, allowing them to gain access to your systems.

Java 187
article thumbnail

Why vulnerability management enhances your cloud application security strategy

Dynatrace

Modern software development requires DevSecOps approaches that shift right into production in addition to shift-left efforts in development. As organizations increasingly rely on cloud-based applications and open-source software to quicken the pace of innovation, teams face an even greater challenge to release apps fast and securely.

Strategy 221
article thumbnail

RSA 2022 guide: DevSecOps transformation with runtime vulnerability management

Dynatrace

Instead, they need to enlist software intelligence to monitor their systems end to end to identify and prioritize remediation efforts. Software intelligence as code enables tailored observability, AIOps, and application security at scale – blog. See how SpectX further enables Dynatrace to address these challenges.

Strategy 225
article thumbnail

How Dynatrace uses Dynatrace to combat the Log4j vulnerability (Log4Shell)

Dynatrace

Log4Shell is a software vulnerability in Apache Log4j 2 , a popular Java library for logging information in applications. The vulnerability enables a remote attacker to execute arbitrary code on a service on the internet if the service runs certain versions of Log4j 2.

article thumbnail

Log4Shell highlights need for secure digital transformation with observability, vulnerability management

Dynatrace

This zero-day vulnerability enables a remote attacker to take control of a device or Internet-based application if the device or app runs certain versions of Log4j 2, a popular Java library. For Avisi , a software development and cloud services company in the Netherlands, its Log4Shell response was immediate and automatic.