The Log4Shell 0-day exploit, how bad is it really?

Log4Shell is the name given to a critical zero-day vulnerability that surfaced last Thursday when it was exploited in the wild in remote-code compromises against Minecraft servers. The source of the vulnerability was Log4J, a logging utility used by thousands if not millions of apps, including those used inside just about every enterprise on the planet. The Minecraft servers were the proverbial canary in the coal mine.

Continue reading