Connect with us

News

Log4j Vulnerably To Wreak Havoc On The Internet For Years To Come

Because of how widespread Log4j is, experts estimate that it may take years to hunt down all vulnerable instances and patch them.

Published

on

log4j vulnerability to wreak havoc on the internet for years to come

As if one pandemic wasn’t enough, there’s now also a cyber-pandemic whose scale is increasing at an exponential rate. The cause of this digital pandemic is a zero-day vulnerability in Java-based logging utility called Log4j. This open-source software allows software developers to log data within their applications, and it has been widely used since its release in 2001.

The vulnerability was disclosed on December 9 by the Alibaba Cloud Security Team, which named it Log4Shell (CVE-2021-44228). Two days later, cybersecurity company Tenable described it as “the single biggest, most critical vulnerability of the last decade”.

Since then, the vulnerability has affected many major tech players, including Amazon Web Services, Adobe, Broadcom, Cisco, Docker, F-Secure, IBM, Juniper Networks, Oracle, Red Hat, Siemens, SolarWinds, Sophos, Ubiquiti, Zoho, and others.

“It’s ubiquitous” said Chris Eng, chief research officer at cybersecurity firm Veracode, in an interview for CNN Business. Even if you’re a developer who doesn’t use Log4j directly, you might still be running the vulnerable code because one of the open-source libraries you use depends on Log4j”.

In addition to affecting large swaths of the global IT infrastructure, the Log4Shell vulnerability is also extremely severe because it involves arbitrary code execution. In other words, it makes it possible for attackers to make the vulnerable system do anything they want.

That’s why the Cybersecurity and Infrastructure Security Agency (CISA), the Canadian Centre for Cyber Security (CCCS), and Germany’s Bundesamt für Sicherheit in der Informationstechnik (BSI) have all called on organizations to take on immediate action and install the available fixes, which were released three days before the vulnerability was published.

Also Read: How To Enable WhatsApp Disappearing Messages For All Chats

Still, attackers have already successfully exploited the vulnerability to steal sensitive data, extract system credentials, install backdoors, and run crypto miners. Some of the largest botnets in the world are now scanning for the vulnerability, and almost half of all corporate networks have already been probed.

Because of how widespread Log4j is, experts estimate that it may take years to hunt down all vulnerable instances and patch them. Until that happens, cybercriminals will be on a hunt as well, ready to exploit them.

Advertisement

📢 Get Exclusive Monthly Articles, Updates & Tech Tips Right In Your Inbox!

JOIN 23K+ SUBSCRIBERS

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Ooredoo Qatar’s 5G+ Network Is Built For Machines As Much As People

Built on 5G Standalone and 5G Advanced, the upgrade lays the groundwork for Qatar’s 2030 digital ambitions.

Published

on

ooredoo qatar's 5g+ network is built for machines as much as people

Ooredoo Qatar has launched what it calls the country’s first 5G+ mobile network. Customers get faster connections, but much of what the operator is promising is aimed at machines.

5G+ isn’t a new generation of mobile technology so much as a layering of upgrades, building on 5G Standalone and 5G Advanced. The result is the familiar trio of higher speeds, greater capacity and lower latency.

For consumers, Ooredoo promises smoother streaming, more responsive gaming and steadier connections on the move. The service is commercially available through mobile broadband in 5G+ coverage areas, and the operator is aiming it at campers during the camping season. The network has been deployed at locations across Qatar, but the announcement doesn’t name them, say whether smartphone plans are included or put figures on the speed and latency gains.

The business case is more detailed: Greater capacity lets more devices connect and exchange data efficiently, while shorter response times support real-time equipment monitoring and automated processes. Network slicing tailors connectivity to specific uses, and 5G Advanced combined with edge computing targets mission-critical applications that require rapid responses. Expanded IoT capabilities cover industrial sensors, asset trackers and utility meters, the building blocks for automation and future smart city services. The company also cites AI-enabled services and complex digital workloads.

Also Read: WHOOP Goes Arabic, Betting On The Gulf’s Appetite For Health Data

“With the 5G+ network, we are enhancing everyday digital experiences for our consumers, enabling innovation, and strengthening the competitiveness of businesses across the country,” said Sheikh Ali bin Jabor bin Mohammad Al Thani, chief executive officer of Ooredoo Qatar.

“From launching the world’s first 5G network in 2018 to deploying Qatar’s first 5G Standalone core network, we have consistently advanced connectivity,” he added.

Ooredoo ties the rollout to Qatar National Vision 2030 and the Digital Agenda 2030, framing it as part of the country’s effort to strengthen its position as a leading regional digital hub. For that ambition, the devices that matter most may be the ones without screens.

Continue Reading

#Trending