13
Jan
CISA Director Jen Easterly on Log4j: “These vulnerabilities are the most severe that I’ve seen in my career.”1
On December 11, 2021, the Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the FBI and NSA, announced a critical remote code execution vulnerability had been identified in the Apache Log4j software library. This vulnerability allowed a successful threat actor to take control of a network system and cause a variety of damage, including the ability to launch ransomware, steal and...