Talos Takes Ep. #82: Log4j followed us in 2022
Summary: Cisco Talos reported that Log4j carried into 2022 with a new CVE disclosed the week of Christmas, additional exploitation attempts, and increased attention from governments worldwide. In the episode, JJ Cummings of Talos' threat intelligence and interdiction team updated listeners on the Log4j situation and what his team may focus on to prevent future exploitation.
Bottom line: A new Log4j CVE arrived the same week as Christmas, and exploitation attempts continued into the new year - so the vulnerability that defined late 2021 is still live in environments that have not finished patching.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026