Live briefing
Everything about Log4Shell
2021 software security vulnerability
Log4Shell (CVE-2021-44228) is a vulnerability reported in November 2021 in Log4j, a popular Java logging framework, involving arbitrary code execution and exploited as a zero-day vulnerability. The vulnerability had existed unnoticed since 2013 and was privately disclosed to the Apache Software Foundation, of which Log4j is a project, by Chen Zhaojun of Alibaba Cloud's security team on 24 November 2021. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Log4ShellA 5-minute orientation
- Pick up a classic book: Argonauts of the western PacificThe most-reprinted book on the subject
- Read the landmark paper: Exploring topic models to discern cyber threats on Twitter: A case study on Log4ShellCited 8 times
- Go sideways: Log4jA closely related topic
- Go sideways: EternalBlueA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Exploring topic models to discern cyber threats on Twitter: A case study on Log4Shell
Defense Mechanism to Generate IPS Rules from Honeypot Logs and Its Application to Log4Shell Attack and Its Variants
Log Jam: Lesson Learned from the Log4Shell Vulnerability
Simulation, Investigation and Response Towards Log4J Vulnerability (Log4Shell)
SCRUTINIZING SUPPLY CHAINS: THE LOG4SHELL CRISIS AND LESSONS FOR FUTURE PREPAREDNESS
📚 Books worth reading
Argonauts of the western PacificBronisław Malinowski · 1922- 📕4th Birthday GuestbookSimply Guestbooks · 2019
Modern Operating SystemsAndrew S. Tanenbaum, Herbert Bos · 1992
What I Saw In CaliforniaEdwin Bryant · 1848
Unix System Administration HandbookEvi Nemeth, Garth Snyder · 1989
HackingJon Erickson, Jon Erickson · 2003
Automate the Boring Stuff with PythonAl Sweigart · 2015
How Linux WorksBrian Ward · 2004
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Log4j Apache Log4j is a Java-based logging utility originally written by Ceki Gülcü. It is part of the Apache Logging Services, a project of the Apache Software…
- EternalBlue EternalBlue is a computer exploit software developed by the U.S. National Security Agency (NSA). It is based on a zero-day vulnerability in Microsoft Windows…
- 2023 MOVEit data breach In May 2023, a critical vulnerability in the MOVEit managed file transfer software was discovered. The discovery of this vulnerability triggered a wave…
- Arbitrary code execution In computer security, arbitrary code execution (ACE) is an attacker's ability to run any commands or code of the attacker's choice on a target machine…
- Play (hacker group) Play (also Play Ransomware or PlayCrypt) is a hacker group responsible for ransomware extortion attacks on companies and governmental institutions. The…
- Vulnerability (computer security) In computer security, a vulnerability is a flaw or weakness in a system's design, implementation, or management that can be exploited by a malicious actor…
- 2021 Microsoft Exchange Server data breach A global wave of cyberattacks and data breaches began in January 2021 after four zero-day exploits were discovered in on-premises Microsoft Exchange Servers…
- List of security hacking incidents This list of security hacking incidents covers important or noteworthy events in the history of security hacking and cracking. Magician and inventor Nevil…