RansomwarecriticalExploited in the wild

Week in review: Log4Shell updates, Kronos ransomware attack, unused identities threat

Help Net Securityby @helpnetsecurityDec 19, 2021 · 00:00 UTC (Dec 19, 2021)5 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-44228 CVE-2021-43890

Tags: cve-2021-44228 cve-2021-43890 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-43890	Spoofing Vulnerability in Microsoft Windows AppX Installer Actively Exploited	7.1	11%	KEVRansomwarePoC	Dec 15, 2021 KEV Dec 15, 2021
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and interviews: Log4Shell: A new fix, details of active attacks, and risk mitigation recommendations Due to the extraordinary widespread use of the open-source Apache Log4j library, the saga of the Log4Shell ( CVE-2021-44228 ) vulnerability is nowhere near finished.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.