Log4j Vulnerability: What You Need to Know

Logo
Presented by

Steve Boone, Alex Livshiz and Liad Levy

About this talk

A critical zero-day vulnerability was disclosed on December 9, 2021. It affects a wildly popular open source Java library called Log4j. The library is nearly ubiquitous in modern application infrastructures and applications and the vulnerability uncovered is a critical one. It allows an attacker to easily trigger a Remote Code Execution (RCE) on a vulnerable system, giving an attacker the ability to run malware and gain complete control of the system. Within hours of the release of the vulnerability, attacks began in earnest and have shown no signs of slowing down. Organizations need to understand if and where they are vulnerable, how to address this and other potential vulnerabilities which may be lurking in application stacks. This new webinar with our R&D team will help you understand: What the Log4j vulnerability is and why it’s so important How to understand if your organization is vulnerable Steps you can take to avoid being surprised by vulnerabilities in your application stack
Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (82)
Subscribers (15238)
Checkmarx is constantly pushing the boundaries of Application Security Testing to make security seamless and simple for the world’s developers and security teams. As the AppSec testing leader, we deliver the unparalleled accuracy, coverage, visibility, and guidance our customers need to build tomorrow’s software securely and at speed.