article thumbnail

MY TAKE: Log4j’s big lesson – legacy tools, new tech are both needed to secure modern networks

The Last Watchdog

These were all obscure open-source components that, over time, became deeply embedded in enterprise systems across the breadth of the Internet, only to have a gaping vulnerability discovered in them late in the game. Log4j, for instance, is a ubiquitous logging library. Visibility is vital. Where is this all taking us?

Security 218
article thumbnail

Log4J: What You Need to Know

Adam Levin

Logging software is typically the first thing a developer or technician will check in the event of an unexpected outage or error, as it can help pinpoint the source of the problem relatively quickly and easily. . Log4J is an open-source software tool used to log activity on internet-based services and software.

article thumbnail

RSAC insights: Software tampering escalates as bad actors take advantage of ‘dependency confusion’

The Last Watchdog

Log4J, aka Log4Shell, refers to a gaping vulnerability that exists in an open-source logging library that’s deeply embedded within servers and applications all across the public Internet. Its function is to record events in a log for a system administrator to review and act upon.