 |
| from here and here |
Log4j is still out there after an entire year. It's hardly the first time a vulnerability has been left unpatched within the online world, but an easy to exploit vulnerability with the highest severity possible still being unpatched after a year? That's not a good precedent to set.
 |
| from here and here |
Don't you just love software vulnerabilities that affect nearly everyone and that most people can't do anything about? Wait, did I say love? I meant hate with the burning fury of a thousand suns.
 |
| from here |
If you installed the previous Log4J patch, guess what you get to do now? That's right, you get to install a new patch all over again because the old one has multiple vulnerabilities.