Log4j Affected 35000 Java Packages
Google’s open-source team said they scanned Maven Central, largest Java package repository, and found that 35,863 Java packages use vulnerable versions of the Apache Log4j library. This includes Java packages…
TellYouThePass Ransomware Exploits Log4j
An old and relatively inactive ransomware family known as TellYouThePass, now active and deploying it in attacks against Windows and Linux devices targeting a critical remote code execution bug in…
Log4j it’s Worsens One More Time !
The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) rolled out yet another patch version 2.17.0 for the widely used logging library that could be…
NASA Mars Mission Log4j Powered ?
Did log4j, the buggy software utility from hell, get NASA’s experimental Mars helicopter hacked? The answer is: according to NASA, it doesn’t even use the doomed tool. One of two…
App With 5Million Downloads Malvertised
Android app with more than 500,000 downloads from Google Play has been caught hosting malware that surreptitiously sends users’ contacts to an C2 server and signs up users to pricey…
Conti Ransomware Exploits Log4j
Conti ransomware gang leverages Log4Shell exploit to compromise VMware vCenter Server installs. The ransomware group used the exploit to target internal devices that are not protected. Conti operators run a private…