Trending: Apache Log4j Vulnerability | Cybersecurity Blog | Grey Noise
Summary: Apache filed a JIRA issue on December 5, 2021 identifying the Log4j flaw later designated CVE-2021-44228, released a patch the next day crediting Chen Zhaojun of Alibaba Cloud Security Team, and weaponized proof-of-concept exploits appeared by December 9. GreyNoise first observed scanning activity on December 9 from 194.48.199[.]78 and 181.214.39[.]2, then saw a 5x increase in hits per sensor between 1200 and 1400 EST on December 10, with exploitation ranging from Minecraft servers to issues potentially affecting Apple iCloud.
What's compelling: GreyNoise compares Log4Shell to ShellShock, which it still observes scanning traffic for since 2014 - a signal that a flaw this deeply embedded in DevOps frameworks, enterprise IT, and vendor products will keep generating exposure long after the patch window closes.
Read the original at GreyNoise Blog ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2021-44228
- Related
- Another Apache Log4j Vulnerability Is Actively Exploited in the Wild (CVE-2021-44228) (Updated) Cyber Risks ·How to Defend Against Emerging Threats with Grey Noise Investigate 4.0 | Cybersecurity Blog | Grey Noise Cyber Risks ·CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 10, 2021