Worst Zero Day Ever? Log4J vulnerability exposes billions of devices to hackers

[julkiewicz]

Finally, Java's promise realized: write once run everywhere.

[lars]

I was so happy when i saw that my Antivirus Company did make a Update in their Exploit Blocker for this Zero Day.

[wilfredotorres]

Hi Leo, This is almost as bad as snatch-and-grab it seems that criminals are becoming more aggressive under the circumstances and there doesn't seem to be enough serious punishment to wavier these crimes.

[curiousottman]

Our cloudflare WAP logs show so many hits from numerous Russian and Chinese IPs. What a nightmare.

[mysteryunknown]

Can you do a video on Kaspersky or like McAfee proactiveness against ransomware or malware deployed through log4j, or will this have no affect on them?

[AlmightyGTR]

IPS systems with Web application safeguard, if updated to latest signatures, should be able to detect and manage this vulnerability. Ofcourse this is not a remediation, only an additional level of defence till we, as you pointed out, patch all the vulnerable applications. So this should buy us time till we patch all apps.

[pcsecuritychannel]

You can use this to scan your servers and systems for this zero-day.

[atpray]

This would be something that will go in history textbooks.

[ifur]

This is your reminder to backup offline, away from any kind of network and electricity.

[angeloalonzo]

This makes me woried when I realized that this affects java and the school project we are creating is in... java 😱

[malwaretestingfan]

Java is going the way of Flash at this point with all the exploits that run on it.

[xasmaniusvolk]

0:40 playing Minecraft online may not be the best idea these times, same for being online with any Computer that has Java installed...

[robi]

Integer is awesome! I’ve been amazed by their tech since I first ran across them at a small booth at RSA many years ago.

[henrymach]

Use Java, they say. It will be fun, they say...

[Hue_Sam]

Log4shell appears:

Everyone: We’re Screwed

[misterak]

Oh dang, doesn't this spread by compromising sites and replacing them with ransomware-infested programs?

[jamesmcv]

This was bad because it hit EVERYTHING. Not just servers, but firewalls and many network devices. From a corporate IT Security perspective, it was drop everything and spend the next couple weeks applying hotfix/patches. Also, it hit right before

[vram]

This entire industry needs to go into maintenance mode and concentrate on auditing/fixing things instead of "agile" and the need to push new and shiny. Either a useless update just moves things around or a new product is released that solves absolutely Jack S.

[zetectic]

There is another channel on YT that keeps saying AVAM is not important just keep you browser updated and you are protected. I very much doubt that this will help defeat this threat.

[YTshashmeera]

I actually had a nightmare about log4j 3 days ago