Innovate Cybersecurity – News and Knowledge for Security Practitioners

The New Standard of Cybersecurity Education.

Innovate Cybersecurity Summit

November 6 – 9th, 2022 — Scottsdale, Arizona

Log4j / Log4Shell News

January 7, 2022

Log4j New Year Wrap-Up

One month into the Log4j vulnerability, we take a look at the 3 CVEs and their fixes, known exploits being observed in the wild, and a way forward in dealing with the ubiquitous and targeted Java library.

December 14, 2021

Apache Releases Log4j 2.16.0 to Patch Lingering DoS Vulnerability

Amid the focus on Log4j while patching CVE-2021-44228, a JNDI injection RCE vulnerability, Apache has released 2.16.0 which disables JNDI by default and removes support for Message lookups in order to fix a…

December 13, 2021

Log4j/Log4Shell Updates and Recommended Guidance

Updates and recommended guidance for identifying vulnerable servers and mitigating exploit attempts.

December 10, 2021

Apache Log4j Zero-Day Exposes Java Applications to RCE

A high-severity zero-day has been uncovered in Apache Log4j which could allow a log injection RCE exploit.

Cybersecurity Industry News

Threat Advisories

Cybersecurity Education

In addition to recent articles, check out our categorized Security Knowledge Guides

Research

University Researchers Pit Top 18 EDR Products Against Real-World Attacks

January 12, 2022

Endpoint Protection (EPP) & Endpoint Detection & Response (EDR) Efficacy Analysis

November 9, 2021

We’ll ruin your day – for free.

Subscribe to receive periodic emails regarding the latest critical vulnerabilities and zero-day exploits as they emerge, with actionable guidance and tips.