The Log4J Vulnerability Will Haunt the Internet for Years
The Apache open source logging library Log4j has a vulnerability known as Log4Shell that is being actively exploited. Attackers have used it to install cryptominers on vulnerable systems, steal system credentials, move deeper into compromised networks, and steal data.
CERT24