log4shell

IT managers say their orgs are better prepared - infosec pros are less confident...

Attackers continue to accelerate their weaponisation of newly-discovered flaws, the Five Eyes list of most-exploited vulnerabilities of 2021 shows. Contrary to some reports suggesting fears of mass-exploitation had been over-indexed, the flaw in Log4j joined the most widely-exploited vulnerabilities last year, despite only being discovered at the year's

New state actors, labelled Wolf and Ocelot, identified in threat report

"Only a handful of customers faced attempted intrusions where Log4j was... the initial entry point

Whac-that-mole...

"All VCenter instances trivially exploitable by a remote and unauthenticated attacker."

AWS, Red Hat, VMware, more affected with pre-auth RCE exploits circulating