News

Log4j Vulnerably To Wreak Havoc On The Internet For Years To Come

Because of how widespread Log4j is, experts estimate that it may take years to hunt down all vulnerable instances and patch them.

Published

3 years ago

December 17, 2021

David Morelo

log4j vulnerability to wreak havoc on the internet for years to come

As if one pandemic wasn’t enough, there’s now also a cyber-pandemic whose scale is increasing at an exponential rate. The cause of this digital pandemic is a zero-day vulnerability in Java-based logging utility called Log4j. This open-source software allows software developers to log data within their applications, and it has been widely used since its release in 2001.

The vulnerability was disclosed on December 9 by the Alibaba Cloud Security Team, which named it Log4Shell (CVE-2021-44228). Two days later, cybersecurity company Tenable described it as “the single biggest, most critical vulnerability of the last decade”.

Since then, the vulnerability has affected many major tech players, including Amazon Web Services, Adobe, Broadcom, Cisco, Docker, F-Secure, IBM, Juniper Networks, Oracle, Red Hat, Siemens, SolarWinds, Sophos, Ubiquiti, Zoho, and others.

“It’s ubiquitous” said Chris Eng, chief research officer at cybersecurity firm Veracode, in an interview for CNN Business. Even if you’re a developer who doesn’t use Log4j directly, you might still be running the vulnerable code because one of the open-source libraries you use depends on Log4j”.

In addition to affecting large swaths of the global IT infrastructure, the Log4Shell vulnerability is also extremely severe because it involves arbitrary code execution. In other words, it makes it possible for attackers to make the vulnerable system do anything they want.

That’s why the Cybersecurity and Infrastructure Security Agency (CISA), the Canadian Centre for Cyber Security (CCCS), and Germany’s Bundesamt für Sicherheit in der Informationstechnik (BSI) have all called on organizations to take on immediate action and install the available fixes, which were released three days before the vulnerability was published.

Also Read: How To Enable WhatsApp Disappearing Messages For All Chats

Still, attackers have already successfully exploited the vulnerability to steal sensitive data, extract system credentials, install backdoors, and run crypto miners. Some of the largest botnets in the world are now scanning for the vulnerability, and almost half of all corporate networks have already been probed.

Because of how widespread Log4j is, experts estimate that it may take years to hunt down all vulnerable instances and patch them. Until that happens, cybercriminals will be on a hunt as well, ready to exploit them.

News

Samsung To Roll Out One UI 7 Starting April 7

The update will introduce AI-driven tools and Google integration, along with a fresh design and enhanced personalization options.

Published

20 hours ago

March 20, 2025

Nour Nasir

Samsung

Samsung has confirmed that One UI 7 will officially begin rolling out on April 7, bringing a fresh design and enhanced personalization options. This update is tailored for a more intuitive user experience, powered by AI-driven improvements. Initially, One UI 7 will be available in the U.S. on the Galaxy S24 series, Galaxy Z Fold6, and Z Flip6 starting April 10. The rollout will gradually expand to more Galaxy smartphones and tablets in the following weeks.

Refined Design And More Customization

With One UI 7, Samsung is introducing a cleaner, more cohesive look aimed at making customization easier and more intuitive. The home screen, widgets, and lock screen have been redesigned to streamline navigation and personalization.

One standout feature is Now Bar, which provides real-time updates directly on the lock screen. Whether checking workout progress during a run or seeing what’s playing on Galaxy Buds, users can access key information with just a swipe — no need to unlock the phone.

AI-Powered Enhancements For A Smoother Experience

Samsung has integrated AI into One UI 7 to make everyday interactions more seamless and efficient. Galaxy AI helps users complete tasks with minimal app switching, while AI Select suggests relevant actions based on selected content. For instance, users can swipe the Edge Panel and tap the AI Select icon while watching a video to instantly create a GIF.

Writing Assist — a favorite tool for Galaxy users — will now offer automatic text summarization and formatting. Meanwhile, Drawing Assist provides a creative boost by generating visuals from text prompts, images, or sketches. Another highlight, Audio Eraser, allows users to fine-tune video sound by isolating and adjusting different audio elements.

Also Read: Google’s Alphabet To Acquire Cybersecurity Firm Wiz For $32 Billion

Finally, Samsung has added greater integration with Google Gemini. Users can simply activate Gemini and ask, “Find Italian restaurants with outdoor seating that are pet friendly” to get instant recommendations. Natural language search also makes adjusting settings easier — users can now tap the mic icon in Settings and say, My eyes feel tired, to receive suggestions like dimming the screen or enabling Eye Comfort Shield.

Device Compatibility And Rollout Schedule

The One UI 7 update will begin rolling out on April 7, with more devices receiving it in the weeks that follow. Compatible models include the Galaxy S24 series, Galaxy S24 FE, Galaxy S23 series, Galaxy S23 FE, Galaxy Z Fold6, Z Flip6, Z Fold5, Z Flip5, and the Galaxy Tab S10 and Tab S9 series.