Wenn ein Digitalthema ganz ohne politischen Bezug sehr weit vorne in der Tagesschau landet, dann scheint es eine große Sache zu sein. Und die ist es wirklich. Denn die Lücke beim Java's Log4j betrifft fast alles, was mit Internet zu tun hat. Wie es dazu kommen konnte und was Schutz bietet, das erklärt Jürgen Kuri von heise online.

Moderation: Til Schäbitz

detektor.fm/was-wichtig-wird
Podcast: detektor.fm/feeds/was-wichtig-wird
Apple Podcasts: itun.es/de/9cztbb.c
Google Podcasts: goo.gl/cmJioL
Spotify: open.spotify.com/show/0UnRK019ItaDoWBQdCaLOt

Log4shell - Digitales Erdbeben?

Hypertext speaks to Paul Ducklin from Naked Security by Sophos about the latest exploit Log4j

What Is Log4Shell And What Should You Do

Back to business as usual with this episode, most of the news is Log4j related but I also talk about Patch Tuesday, a Chrome Zero Day, new AVD and Windows 365 features and more!

Reference Links:
https://www.rorymon.com/blog/episode-208-the-latest-updates-on-log4j/

The Latest Updates on Log4j

Our scheduled topic was supply chains generally, but the Log4Shell vulnerability dominated the discussion.  We dove into the challenge of patching and fixing a library that is literally in nearly every device or service for years and years.

That led us to supply chains in the context of software, and specifically Java Log4j. This is a critical topic and our conversation about it was very thoughtful.  We really covered the angles of what it takes to produce and maintain a supply chain for software.  Then we discussed alternatives and things to consider when you building anything: software products or physical products in which embedded systems and components impact your designs.

Transcript: https://otter.ai/u/CJ8pYF1La6tetFasqZhEojo_zoY 
Image: https://www.pexels.com/photo/carton-container-with-eggs-in-rows-6294430/

Software Supply Chains [#Log4Shell]

Emner i denne uge:
- Log4j / Log4Shell sårbarheden
- Status på Nordic Choice Ransomware angreb
- Svindel mails udgiver sig for at være fra IKEA
- Skift fra NemID til MitID
- Falsk mail udgiver sig for at være fra Power's kundeservicee

Cyber Vejret - Uge 51

In Breaking Badness Episode 106, Taylor Wilkes-Pierce, Tim Helming, and Kelsey LaBelle discuss Project Zero’s deep dive into an NSO zero-click iMessage exploit and the impact and takeaways of the log4j vulnerability.

106. Log4Shell Shock

On this week's episode there are many more details on the developing Log4Net vulnerability, I also cover details on the recent Oracle acquisition and more!

Reference Links:
https://www.rorymon.com/blog/episode-209-updates-on-log4j-but-also-oracle-are-acquiring-who/

Updates on Log4j but also Oracle are Acquiring Who!?

De IT kriminelle holder ikke juleferie
Sårbarheden Log4Shell spøger fortsat, også i Danmark
Politiet finder 225 millioner stjålne passwords
Svindel mails fra HBO og OneDrive

Cyber Vejret - Uge 52

The Log4Shell zero-day vulnerability is truly one of the most significant security threats of the past decade and its effects will be felt far into 2022 and beyond. Imperva has observed over 102M exploitation attempts across thousands of sites protected by Imperva Cloud Web Application Firewall (WAF). In the days following, the team at Imperva also responded to the additional Log4j-related vulnerabilities disclosed following the initial zero-day publication, to ensure the best possible protection for our customers.

For more details, and related tables and examples, please visit: https://www.imperva.com/blog/log4shell-log4j-remote-code-execution-the-covid-of-the-internet/

Log4Shell log4j Remote Code Execution: The COVID of the Internet

Cybersikkerhed.
Ugentligt podcast om IT sikkerhed og aktuelle trusler på internettet, herunder spam, svindel, phishing, virus, malware, ransomware og andet du skal være opmærksom når du færdes på internettet. Danskere ryger dagligt i fælden hos de kriminelle, og det kan nogle gange være svært at gennemskue - det hjælper jeg dig med at kunne på et let forståeligt sprog uden for mange tekniske begreber.

Das ist das Soundcloud-Profil der Wortinhalte von detektor.fm.

http://detektor.fm

Hypertext is one of South Africa’s leading technology news and reviews sites, catering for consumers, small and medium businesses and the technology channel. We publish original content daily and welcome your feedback.

Where timely and relevant security meets puns and witty banter. Our goal is to keep defenders apprised of pertinent news and trends in under forty-five minutes.

An excellent source for industry thought leadership in Edge Computing, Cloud Computing, DevOps, Open Source base on discussions at.the2030.cloud

5 Bytes Podcast features some of the highlights in enterprise IT for the last week as well as some useful resources for IT Pros and more!

Conversations, news, views, blog-casts, and reviews from our cybersecurity experts. Raw and unplugged.

We built the world’s first and only multi-cloud platform to protect the edge, apps, and databases.

Popular tracks tagged #log4shell