What’s Log4J?

What’s Log4J?

Log4j is a Java-based logging utility, one of several Java logging frameworks. A bug, dubbed “Log4Shell,” discovered in the Java-logging library Apache Log4j in Dec. 2021 could be used to take over computer servers, potentially putting online services and popular consumer devices at risk of failure. Amit Yoran, CEO of the cybersecurity firm Tenable, called it “the single biggest, most critical vulnerability of the last decade.”

What’s the Damage?

Cybersecurity firm CheckPoint said on Dec. 13, 2021, it had detected over 800,000 attempted exploits of the bug in the first 72 hours after it became public, including in the Microsoft-owned hit game Minecraft.