Hackernews posts about Log4Shell
Log4Shell is a critical vulnerability in the widely-used Apache Log4j logging library that allows attackers to remotely execute arbitrary code on vulnerable systems.
- Study shows 38% of Java apps still affected by Log4j vulnerability log4shell (www.theregister.com)
- Log4Shell malware written in D language (www.securityweek.com)
- Log4Shell Retrospective: Overblown and Exaggerated (vulncheck.com)
- Show HN: Pip Installable DuckDB Extensions (github.com)