Quick Hits Of Wisdom, Knowledge And Snark #119
Ninety miles from the South Eastern tip of the United States, Liberty has no stead. In order for Liberty to exist and thrive, Tyranny must be identified, recognized, confronted and extinguished.
“Given that Log4j has been a ubiquitous logging solution for Enterprise Java development for decades, Log4j has the potential to become a vulnerability that will persist within Industrial Control Systems (ICS) environments for years to come,” according to a blog post by cybersecurity researchers at Dragos.A cybercriminal can exploit the flaw by sending a malicious code string that will get logged by the Log4j version, allowing the attacker to load an arbitrary Java code to a server. The vulnerability could potentially allow them to take control of the server.
“This vulnerability is one of the most serious that I’ve seen in my entire career, if not the most serious,” Jen Easterly, the head of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), said on a phone call. The Epoch Times has contacted CISA for comment.Easterly warned that CISA can “expect the vulnerability to be widely exploited by sophisticated actors and we have limited time to take necessary steps in order to reduce the likelihood of damaging incidents.”
Sen. Richard Blumenthal at the Connecticut People's World awards event |
Trump re-ups attack on Senator ‘Da Nang Dick’ Blumenthal for stolen valor