Log4Shell

By: Steven Ng, CIO and EVP of Managed Security Services, Ensign On 9 December 2021, the critical vulnerability (CVE-2021-44228, also known as “Log4Shell”) in a widely used Apache logging framework service, log4j2 library, was reported to be under active exploitation by threat actors. Log4Shell’s Impact on the World As Log4j is one of the most popular…