Search: “Apache Log4j 2”

44 stories

Apache Log4j 2 RCE CVE-2021-44228 is actively exploited via crafted JNDI lookups; Palo Alto Unit 42 urges upgrading to Log4j 2.17.1.

Unit 42 details CVE-2021-44228, an easily exploited remote code execution flaw in Apache Log4j 2 where attacker-supplied JNDI lookups in logged user input cause payload download and execution. Massive internet-wide scanning for unpatched systems has begun, with observed follow-on activity including information stealing, Cobalt Strike delivery, and coinmining. The recommended fix is Log4j 2.17.1, which also patches CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Widely used Java software including Apache Struts, Solr, Druid, Flink, ElasticSearch, and Spring Boot is affected.

Palo Alto Unit 42Aug 17, 12:20 UTC · 29d agoExploit / PoC in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-45105+3 CVEs

Log4Shell update: Attack surface, attacks in the wild, mitigation and remediation

Help Net SecurityDec 13, 00:00 UTC · Dec 13, 2021Ransomware in the wildCVE-2021-442281

NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon

The Hacker NewsJan 8, 07:04 UTC · Jan 8, 2022Ransomware in the wildCVE-2021-44228

Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities

The Hacker NewsJan 5, 05:13 UTC · Jan 5, 2022Vulnerability in the wildCVE-2021-45046 CVE-2021-45105 CVE-2021-4104+1 CVEs

Week in review: Log4j new vulnerabilities, Microsoft patch bypass, 2022 e-commerce threat trends

Help Net SecurityDec 26, 00:00 UTC · Dec 26, 2021Vulnerability CVE-2021-44228 CVE-2021-40444

Open-source software holds the key to solving Log4Shell-like problems

Help Net SecurityDec 22, 00:00 UTC · Dec 22, 2021Exploit / PoC in the wild

Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wild

Cisco TalosDec 10, 19:37 UTC · Dec 10, 2021Exploit / PoC in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-45105+1 CVEs

If hackers are exploiting the Log4j flaw, CISA says we might not know yet

CyberScoopJan 10, 17:30 UTC · Jan 10, 2022Ransomware in the wild

Log4Shell: How It’s Exploited and Mitigating Damage

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Exploit / PoC in the wildCVE-2021-44228

Week in review: Apache Log4j 0day exploited, Kali Linux 2021.4 released, Patch Tuesday forecast

Help Net SecurityDec 12, 00:00 UTC · Dec 12, 2021Vulnerability in the wildCVE-2021-44228 CVE-2021-44515

Google: More than 35,000 Java packages impacted by Log4j vulnerabilities

The RecordJan 18, 00:00 UTC · Jan 18, 2023Vulnerability CVE-2021-44228 CVE-2021-45046

The Age of Collaborative Security: What Tens of Thousands of Machines Witness

The Hacker NewsJul 7, 11:47 UTC · Jul 7, 2022Vulnerability

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.

Recorded FutureSep 8, 00:00 UTC · 8d agoVulnerability in the wildCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+4 CVEs