log4j
A year after a critical vulnerability in a ubiquitous piece of open source software, Log4J, set off what The Stack described at the time as an “internet cluster bomb”, nearly 40% of downloads of the popular open source java logging library are still of the vulnerable version – despite the high
Attackers continue to accelerate their weaponisation of newly-discovered flaws, the Five Eyes list of most-exploited vulnerabilities of 2021 shows. Contrary to some reports suggesting fears of mass-exploitation had been over-indexed, the flaw in Log4j joined the most widely-exploited vulnerabilities last year, despite only being discovered at the year's
"Only a handful of customers faced attempted intrusions where Log4j was... the initial entry point
Microsoft flags one of its own processes as sensor tampering.
"All VCenter instances trivially exploitable by a remote and unauthenticated attacker."
AWS, Red Hat, VMware, more affected with pre-auth RCE exploits circulating