3 ms·
They specifically refer to Log4shell. That to me felt like a damp squib. I remember seeing the apache logs on my home desktop on my cable modem back in 2001, t
by ta1243 4y ago
They specifically refer to Log4shell. That to me felt like a damp squib.
I remember seeing the apache logs on my home desktop on my cable modem back in 2001, the default.ida GETS would race through with multiple attempts per hour.
Conversely I saw barely any attempts on my public facing apache servers 20+ years later with log4shell. Was it just me?
- Godel_unicode 4y agoThere was at least one federal agency directly breached using it, so that’s probably part of it: https://www.bleepingcomputer.com/news/security/us-govt-iranian-hackers-breached-federal-agency-using-log4shell-exploit/amp/ https://www.bleepingcomputer.com/news/security/us-govt-irani...