Log4Shell, a critical security flaw in Log4j, an open source logging software used in everything from online games to enterprise software and cloud data centres, has security teams all over the world scrambling to fix it.

Because of its widespread use, the internet has been put on high alert as hackers increase their efforts to target weak systems.&nbsp;

What exactly is the Log4j vulnerability?&nbsp;

The vulnerability, also known as Log4Shell, was first discovered by LunaSec researchers.

The flaw was identified in Microsoft's Minecraft, but LunaSec warns that because of Log4j's "ubiquitous" presence, "many, many services" are vulnerable to this exploit.

The reason for this is that practically every major Java-based enterprise software and server on the market uses this open-source Java library.&nbsp; 
 
<a href="https://www.wionews.com/world/software-flaw-log4shell-may-be-worst-computer-vulnerability-in-a-decade-436306">Also read | Software flaw 'Log4Shell' may be worst computer vulnerability in a decade</a>

Why is dealing with Log4j such a difficult task?&nbsp;

Hackers are attempting over 100 times per minute to exploit a serious security weakness in the widely used Java logging system known as 'Apache log4j2,' according to cyber security researchers, putting millions of firms at danger of cyber theft.

This 'ubiquitous' zero-day attack, currently regarded as one of the most significant vulnerabilities on the Internet in recent years, affects a number of famous sites, including Apple iCloud, Amazon, Twitter, Cloudflare, and Minecraft.

Many types of enterprise and open-source software, including cloud platforms, online applications, and email services, employ 'Apache Log4j.'

With over 400,000 downloads from its GitHub repository, Apache Log4j is the most popular java logging package.

It is used by a large number of enterprises throughout the world and allows users to log in to a variety of popular applications.&nbsp;

Researchers at Microsoft have also warned about attacks attempting to take advantage of `Log4j` vulnerabilities, including a range of crypto-mining malware. 
 
Also Read:&nbsp;<a href="https://www.wionews.com/science/songs-by-virus-company-selling-covid-19-sound-for-nft-436204" hreflang="en">Songs by virus: Company selling COVID-19 sound for NFT</a>

What is the severity of the flaw?&nbsp;

As the number of companies and services affected by Log4Shell rises, so does the number of attacks that take advantage of the flaw.

Kryptos Logic, a security firm, also announced on Sunday that it has discovered more than 10,000 different IP addresses scanning the internet, which is 100 times the amount of systems probing for Log4Shell on Friday.

Given Log4Shell's broad scope and the potential of ransomware following, this is most certainly the calm before the storm.

Every security team's primary priority should be patching or minimising the vulnerability.&nbsp;

(With inputs from agencies)

Log4Shell, a critical security flaw in Log4j, an open source logging software used in everything from online games to enterprise software and cloud data centres, has security teams all over the world scrambling to fix it.

Log4Shell, a critical security flaw in Log4j, an open source logging software used in everything from online games to enterprise software and cloud data centres, has security teams all over the world scrambling to fix it. Because of its widespread use, the internet has been put on high alert as hackers increase their efforts to target weak systems. What exactly is the Log4j vulnerability? The vulnerability, also known as Log4Shell, was first discovered by LunaSec researchers. The flaw was identified in Microsoft's Minecraft, but LunaSec warns that because of Log4j's "ubiquitous" presence, "many, many services" are vulnerable to this exploit. The reason for this is that practically every major Java-based enterprise software and server on the market uses this open-source Java library. Also read | Software flaw 'Log4Shell' may be worst computer vulnerability in a decade Why is dealing with Log4j such a difficult task? Hackers are attempting over 100 times per minute to exploit a serious security weakness in the widely used Java logging system known as 'Apache log4j2,' according to cyber security researchers, putting millions of firms at danger of cyber theft. This 'ubiquitous' zero-day attack, currently regarded as one of the most significant vulnerabilities on the Internet in recent years, affects a number of famous sites, including Apple iCloud, Amazon, Twitter, Cloudflare, and Minecraft. Many types of enterprise and open-source software, including cloud platforms, online applications, and email services, employ 'Apache Log4j.' With over 400,000 downloads from its GitHub repository, Apache Log4j is the most popular java logging package. It is used by a large number of enterprises throughout the world and allows users to log in to a variety of popular applications. Researchers at Microsoft have also warned about attacks attempting to take advantage of `Log4j` vulnerabilities, including a range of crypto-mining malware. Also Read: Songs by virus: Company selling COVID-19 sound for NFT What is the severity of the flaw? As the number of companies and services affected by Log4Shell rises, so does the number of attacks that take advantage of the flaw. Kryptos Logic, a security firm, also announced on Sunday that it has discovered more than 10,000 different IP addresses scanning the internet, which is 100 times the amount of systems probing for Log4Shell on Friday. Given Log4Shell's broad scope and the potential of ransomware following, this is most certainly the calm before the storm. Every security team's primary priority should be patching or minimising the vulnerability. (With inputs from agencies)

What is Log4j, the biggest computer vulnerability in decades?

In what may be the worst computer vulnerability found in years, the flaw, which is dubbed “Log4Shell”, is risking several organisations around the world. &nbsp;

The critical vulnerability, which is present in a widely used software tool, is emerging to be a major threat. &nbsp;

The vulnerability, which was unearthed in an open-source logging tool, is present in cloud servers and enterprise software used by numerous industries and governments. &nbsp;&nbsp;

Also Read:&nbsp;<a href="https://www.wionews.com/world/apple-briefly-stopped-selling-its-products-in-turkey-but-why-436115" hreflang="en">Apple briefly stopped selling its products in Turkey, but why?</a>

Unless fixed, it may grant miscreants an easy access to internal networks, which can result in loss of valuable data, deletion of crucial information, etc. &nbsp;

It can be a boon for spies, criminals and programming novices. Adam Meyers, senior vice-president, intelligence, cybersecurity firm Crowdstrike, said, “The internet is on fire right now. People are scrambling to patch and all kinds of people scrambling to exploit it.” &nbsp;

Also Read:&nbsp;<a href="https://www.wionews.com/science/songs-by-virus-company-selling-covid-19-sound-for-nft-436204" hreflang="en">Songs by virus: Company selling COVID-19 sound for NFT</a>

As it is already installed on millions of servers, anyone with the exploit can get full access to an unpatched computer, which uses the software. &nbsp;

Located in an open-source Apache software, which is used to run websites and other web services, the vulnerability was reported to the foundation on November 24 by the Chinese tech giant Alibaba. In two weeks, a fix was developed and released. &nbsp;

The real complicated task is the patching of systems around the world. &nbsp;

(With inputs from agencies)&nbsp;

In what may be the worst computer vulnerability found in years, the flaw, which is dubbed “Log4Shell”, is risking several organisations around the world. The critical vulnerability, which is present in a widely used software tool, is emerging to be a major threat.

In what may be the worst computer vulnerability found in years, the flaw, which is dubbed “Log4Shell”, is risking several organisations around the world. The critical vulnerability, which is present in a widely used software tool, is emerging to be a major threat. The vulnerability, which was unearthed in an open-source logging tool, is present in cloud servers and enterprise software used by numerous industries and governments. Also Read: Apple briefly stopped selling its products in Turkey, but why? Unless fixed, it may grant miscreants an easy access to internal networks, which can result in loss of valuable data, deletion of crucial information, etc. It can be a boon for spies, criminals and programming novices. Adam Meyers, senior vice-president, intelligence, cybersecurity firm Crowdstrike, said, “The internet is on fire right now. People are scrambling to patch and all kinds of people scrambling to exploit it.” Also Read: Songs by virus: Company selling COVID-19 sound for NFT As it is already installed on millions of servers, anyone with the exploit can get full access to an unpatched computer, which uses the software. Located in an open-source Apache software, which is used to run websites and other web services, the vulnerability was reported to the foundation on November 24 by the Chinese tech giant Alibaba. In two weeks, a fix was developed and released. The real complicated task is the patching of systems around the world. (With inputs from agencies)

Software flaw 'Log4Shell' may be worst computer vulnerability in a decade

log4shell

Log4shell, News on Log4shell, stories on Log4shell, articles on Log4shell, Log4shell stories at Wion, Log4shell news, Log4shell latest news