Threat Source Newsletter (Dec. 16, 2021)
Summary: Cisco Talos reported that defenders were pushing to address CVE-2021-44228, an actively exploited vulnerability in the widely used Apache Log4j Java logging library, with major targets including Apple and Minecraft. Apache released Log4j version 2.16.0, which disables JNDI by default and removes support for message lookups, after 2.15.0 removed the ability to resolve lookups.
Bottom line: Talos stated it believes this will be a widely exploited vulnerability among attackers moving forward, and the library may be a dependency in enterprise web applications including Elastic, so the exposure extends well beyond the named targets.