Hackernews posts about Log4Shell
Log4Shell is a critical vulnerability in the widely-used Apache Log4j logging library that allows attackers to remotely execute arbitrary code on vulnerable systems.
- Show HN: Pip Installable DuckDB Extensions (github.com)
- Log4Shell Still Has Sting in the Tail (spectrum.ieee.org)
- Log4Shell – Through the scope of a reactive network telescope (blog.apnic.net)
- Study shows 38% of Java apps still affected by Log4j vulnerability log4shell (www.theregister.com)
- US govt: Iranian hackers breached federal agency using Log4Shell exploit (www.bleepingcomputer.com)
- Log4Shell Lives (thenewstack.io)
- Log4Shell malware written in D language (www.securityweek.com)
- Iranian hackers use Log4Shell to mine crypto on federal computer system (www.cyberscoop.com)
- Log4Shell Retrospective: Overblown and Exaggerated (vulncheck.com)
- Log4Shell Still Has Sting in the Tail (spectrum.ieee.org)
- Digging into the numbers one year after Log4Shell (www.scmagazine.com)
- Effects, Capabilities, and Log4Shell (nschulzke.com)
- A Year Later, That Brutal Log4j Vulnerability Is Still Lurking (www.wired.com)
- A Year Later, That Brutal Log4j Vulnerability Is Still Lurking (www.wired.com)
- Unix's special way of marking login shells goes back to V2 Unix (at least) (utcc.utoronto.ca)