Tag: Java

Senate Homeland Committee met with industry experts to examine Log4j cybersecurity vulnerabilities

Senate Homeland Committee met with industry experts to examine Log4j cybersecurity vulnerabilities

The U.S. Senate Committee on Homeland Security & Governmental Affairs convened this week a hearing with experts from the cybersecurity industry and research community to examine the Log4j cybersecurity vulnerabilities. The Apache Foundation chief said at the meeting that the…

16 URL parsing libraries found to contain inconsistencies, leading to security vulnerabilities

16 URL parsing libraries found to contain inconsistencies, leading to security vulnerabilities

Claroty’s Team82 research arm released on Monday joint research with Snyk that examined 16 URL parsing libraries, written in a variety of programming languages, and noticed some inconsistencies with how each chooses to parse a given URL (uniform resource locator)…

Log4Shell vulnerability may have affected close to 10 percent of ICS systems globally

Log4Shell vulnerability may have affected close to 10 percent of ICS systems globally

At least one-tenth of all industrial control systems (ICS) globally may have been affected by the Log4Shell vulnerability because they use the vulnerable Java software, researchers at cybersecurity firm Kaspersky have revealed based on analysis of their telemetry data. The…

Log4j library

Another vulnerability found in Log4j library, as Siemens extends affected products

The Apache Software Foundation (ASF) has identified another vulnerability in the Log4j library, its open-source Java logging software that is used across both enterprise apps and cloud services. Following the ASF’s announcement of the second denial of service Log4j library…

Log4j

Log4j vulnerability now hits industrial sector, as CISA calls upon users to identify, mitigate, patch affected products

Siemens identified on Monday the presence of the Apache Log4j vulnerability in some of its product lines, which could potentially be exploited by remote unauthenticated attackers to execute code on vulnerable systems. The affected products include E-Car OC Cloud Application,…

More Tag: Java posts: