New Study Reveals 30% of Log4Shell Instances Remain Vulnerable
Summary: Qualys analyzed anonymized security data from its Cloud Platform across global enterprise networks to assess how organizations implemented the Log4j2 library after Log4Shell was disclosed on December 9, 2021. Nearly 1 million attack attempts were launched in the 72 hours after disclosure, and Qualys published findings within 24 hours, released over 70 vulnerability detections, and built an open source Log4j scanning utility.
Key Takeaway: Nearly 1 million attack attempts in 72 hours landed just as many companies were moving to skeleton IT staffing for the holidays - the attackers timed their window to the moment defenders were thinnest.
Read the original at Qualys Blog ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026