Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability

🗓️ 12 Dec 2021 05:29:03Reported by Microsoft 365 Defender Threat Intelligence TeamType

mmpc🔗 www.microsoft.com👁 441 Views

Guidance for Log4j 2 vulnerability preventio

Reporter	Title	Published	Views	Family All 2569
ICS	Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities in Furtherance of Malicious Activities	19 Nov 202112:00	–	ics
ICS	Mitigating Log4Shell and Other Log4j-Related Vulnerabilities	23 Dec 202112:00	–	ics
ICS	2021 Top Routinely Exploited Vulnerabilities	28 Apr 202212:00	–	ics
ICS	Karakurt Data Extortion Group	12 Dec 202312:00	–	ics
ICS	Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems	18 Jul 202212:00	–	ics
ICS	Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations	14 Sep 202212:00	–	ics
ICS	Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors	6 Oct 202212:00	–	ics
ICS	Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester	25 Nov 202212:00	–	ics
ICS	#StopRansomware: Hive Ransomware	25 Nov 202212:00	–	ics
ICS	#StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities	9 Feb 202312:00	–	ics

12 Dec 2021 05:29Current

9.8High risk

Vulners AI Score9.8

EPSS0.99999

log4j vulnerability prevention log4j exploit detection log4j ransomware log4j security patches log4j threat detection log4j vulnerability management log4j attack vectors log4j remote code execution