State actors from China, Iran, North Korea and other countries are targeting the Log4j (CVE-2021-44228) flaw.
Attackers were attempting to exploit the flaw to distribute the Emotet, Trickbot and Bazaloader malware.
John Hammond of Huntress discusses the seriousness of the Apache Log4j vulnerability, the community response, and how attackers are exploiting it.
Apple has released iOS 15.2 and macOS Monterey 12.1, which both include dozens of security fixes for critical flaws.
The use-after-free flaw (CVE-2021-4102) has been fixed in Chrome version 96.0.4664.110 for Windows, Mac and Linux. Learn more about it.