LOG4J is still out there, more patches out

I spotted this article recently and read it today as it was sent to our TSB email list.

Throwback was asking me about what was going on in the Log4J aspect of things, and I guess I can now tell them I finally read that article sent to our email list.

The article sent on the 8th of January is titled Patch systems vulnerable to critical Log4j flaws, UK and US officials warn.

We know that CVE-2021-44228 has been one of many CVE numbers given. This is the most severe vulnerability says the article.

According to this article, exploit code was released before a patch was made available, but yet, it could have been just the oposite and we may still have this problem. Actors love reversing patches so they can take advantage of systems, so just be aware of that one.

VMware Horizon servers are talked about in this article, and the artivcle even talks about quifax too.

Please feel free to check this article out for all of the latest, I don’t want to take the writing away from this one.