From Arctic Wolf: Log4Shell in the Field – A Brief Analysis Through January 2022
This is a follow-up to our previous blog posts covering the Log4j vulnerability and the Deep Scan tool we made available to help identify vulnerable systems.
As we close the first month of 2022, we looked into the activity related to the Log4Shell vulnerability CVE-2021-44228 observed across our 2,300+ customers.
Many of you will empathize with the struggle to find all instances of the vulnerable Log4j component, especially at the scale that comes with having a large customer base. It’s from this necessity of scale that we were able to focus on providing the Deep Scan tool to the community (available on GitHub).
https://arcticwolf.com/resources/blog/log4shell-in-the-field-brief-analysis-through-january-2022
Hugh Taylor
Hugh Taylor is a Certified Information Security Manager (CISM). In addition to editing Journal of Cyber Policy, he writes about cybersecurity, compliance and enterprise technology for such clients as Microsoft, IBM, SAP, HPE, Oracle, Google and Advanced Micro Devices. Prior to launching his freelance writing career, he served in executive roles at Microsoft, IBM and several venture-backed technology startups.