An Interactive Exploration of the Log4J Vulnerability - Seguridad Mania.com - España y América Latina

The recent disclosure of a severe vulnerability impacting Log4J — an extremely popular Java open source logging library — has sparked a five-alarm fire in the security world and beyond. Not only is Log4J used in countless applications across the world, but programs that use a vulnerable version of the library are subject to remote code execution. FOSSA will share insights into the Log4J vulnerability, including a live demo of the vulnerability being exploited and a look at how you can use our free CLI to identify if you’re using potentially vulnerable dependencies. We’ll also discuss: -Log4J background: how the vulnerability came into existence and the mechanics behind it -The wide-ranging impact of the vulnerability -Remediation strategies: version upgrades and beyond