3 ms·
Should that same existential penalty be applied to every company who had Log4J running in prod a few months back? That was a much more widespread root compromis
by bigiain 5y ago
Should that same existential penalty be applied to every company who had Log4J running in prod a few months back? That was a much more widespread root compromise...
- lallysingh 5y agoVulnerability != Compromise
- rhizome 5y agoNot comparable. Log4j was a vulnerability in the software, not leaving their shit open and and putting all their cash registers on an intranet available to the internet. https://krebsonsecurity.com/2015/09/inside-target-corp-days-after-2013-breach/ https://krebsonsecurity.com/2015/09/inside-target-corp-days-...