log4shell
"Routine initial exploitation of zero-day vulnerabilities represents the new normal which should concern end-user organisations and vendors alike."
IT managers say their orgs are better prepared - infosec pros are less confident...
Attackers continue to accelerate their weaponisation of newly-discovered flaws, the Five Eyes list of most-exploited vulnerabilities of 2021 shows. Contrary to some reports suggesting fears of mass-exploitation had been over-indexed, the flaw in Log4j joined the most widely-exploited vulnerabilities last year, despite only being discovered at the year's
"Only a handful of customers faced attempted intrusions where Log4j was... the initial entry point
"All VCenter instances trivially exploitable by a remote and unauthenticated attacker."
AWS, Red Hat, VMware, more affected with pre-auth RCE exploits circulating