<图片 alt="Fleet 使用 osquery YARA 检测 Log4j 漏洞的示意图" src="website/assets/images/articles/detect-log4j-with-osquery-and-fleet-1600x900@2x.jpg ...

Azul Intelligence Cloud detects known vulnerabilities down to the class-level, eliminating up to 99% of false positives and boosting DevOps capacity and productivity   — Azul, the only company 100% ...

Two years have passed since the cybersecurity world was rocked by the discovery of Log4Shell, a critical vulnerability in the Log4j library. First discovered on December 9, 2021, this legendary flaw ...

之前在实习写的文章都投到了公司平台，没有在这边更新，后面会在freebuf上重新更新记录。这个也是去年刚出这个漏洞的时候分析的，没有发布在外面平台。 使用idea新建项目并且引入jar包 ...

It’s been four months since Log4Shell, a critical zero-day vulnerability in the ubiquitous Apache Log4j library, was discovered, and threat analysts warn that the application of the available fixes is ...

本文介绍了日志系统的发展历程，从System.out.println到各种日志框架如log4j、logback和JUL。SLF4J作为日志门面系统，提供了统一的接口，简化了不同日志框架之间的切换。通过 StaticLoggerBinder 类，SLF4J ...

From the start, it was clear that the Log4j vulnerability, also referred to as Log4Shell, would be widespread and present major challenges for organizations. These challenges include but are not ...

The Apache Log4j Project is among the most deployed pieces of open source software, providing logging capabilities for Java applications. Log4j is part of the Apache Logging Services Project -- an ...

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More Jen Easterly, director of the Cybersecurity and Infrastructure Security ...

Open-source software is everywhere now, but the Log4j flaw that affects Java enterprise applications is a reminder of what can go wrong in the complicated modern software supply chain. The challenge ...

Just in time for the holidays, the Log4j vulnerabilities sent IT and security teams into a panic early last month. The Apache Foundation has since fixed the bugs and issued patches. So the onus is now ...

How can MSSPs, cybersecurity professionals and threat hunters detect the Log4j zero day vulnerability (known as Log4shell)? Here's a list of Log4j vulnerability scanner tools from third-party software ...