Operations | Monitoring | ITSM | DevOps | Cloud

Vulnerability

Log4j and VMware Tanzu Application Service

Dec 17, 2021 By VMware Tanzu In VMware Tanzu
This video goes into detail on how to perform application and platform mitigation of the Log4j CVEs using VMware Tanzu Application Service. Please note: This content is relevant as of 12/16/21 and could become outdated due to the ever-changing Log4j situation. Here are some additional resources regarding this vulnerability.
View Video
meshiq

Nastel Products Are Not Affected by Log4j Vulnerability Issues

Dec 16, 2021 By David Liff In meshIQ

Recent news about Log4j has enterprises and vendors scrambling for information and answers, including customers of messaging middleware and Integration Infrastructure Management (i2M) products. Nastel Technologies customers will not be exposed to any risks from this vulnerability, but enterprises are encouraged to check with their Cloud and other solution vendors to protect themselves and their data.

Read Post

The wrong lessons to learn from the Log4j vulnerability

Dec 16, 2021 By Sleuth In Sleuth
Log4j and Java sucks, but I don't use that, so I'm safe...right? Wrong. This video walks through the wrong lessons to take away from the huge Log4j remote code execution vulnerability, and points you at the lessons you should be learning instead. While the Log4j vulnerability may not directly affect you, its type of vulnerabilities certainly do.
View Video
raygun

JavaScript security: Vulnerabilities and best practices

Dec 15, 2021 By Anna Monus In Raygun
If you run an interactive website or application, JavaScript security is a top priority. There’s a huge array of things that can go wrong, from programmatic errors and insecure user inputs to malicious attacks. While JavaScript error monitoring can help you catch many of these issues, understanding common JavaScript security risks and following best practices is just as important.
Read Post

Log4j Log4Shell Vulnerability: All You Need To Know

Dec 15, 2021 By JFrog In JFrog
On December 9, 2021, a researcher from the Alibaba Cloud Security Team dropped a zero-day remote code execution exploit on Twitter, targeting the extremely popular log4j logging framework for Java. Since then, the trivially exploitable (weaponized PoCs are available publicly) and extremely popular library has reportedly been massively exploited and has gotten wide coverage on media and social networks.
View Video
opslogix

Apache Log4j vulnerability and VMware

Dec 15, 2021 By OpsLogix In OpsLogix
Apache Log4j, an open-source logging software used in everything from online games to enterprise software and cloud data centers, has a severe security vulnerability that has security teams all over the world working frantically to correct it. The internet has been on high alert as hackers increase their efforts to target vulnerable systems, owing to its broad use.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.