Log4Shell RCE zero-day being exploited all over the Internet

[Jan]

Critical security flaw being exploited all over the Internet

IT security company Sophos has detected a sharp increase in attacks exploiting the zero-day exploit in Apache's Log4j.

Vulnerable organisations include Apple, Tencent, Valve, Google, Minecraft, Amazon, and Tesla, to name a few.

 

[Swa]

HTF do you introduce such a serious flaw as executing log messages?

 

[SkillBeatsAll]

 

[r00igev@@r]

So if you have a Sophos firewall in front of your web server, why isn't it protection it?