Iran-backed hacking group Phosphorous or APT35 is using the Log4j vulnerability to distribute a new modular PowerShell toolkit, according to security firm Check Point. APT35 is one of several ...

More than 80% of Java packages affected by the vulnerability in the Apache Log4j library cannot be updated directly and will require coordination between different project teams to address the flaw. A ...

TEL AVIV, Israel and BOSTON, Jan. 4, 2022 /PRNewswire/ -- WhiteSource, a leader in open source security and management, today announced that a Log4j remediation preset is now included in both its ...