TIMES.KY

Cayman Islands, Caribbeanand International News
Tuesday, Feb 07, 2023

Critical software bug sets ‘internet on fire’

Critical software bug sets ‘internet on fire’

Cybersecurity experts have raised the alarm about a previously unknown critical flaw in a commonly used software tool that could potentially allow hackers to compromise millions of devices connected to the internet.

The fault, known as ‘Log4Shell’, has been described as the “single biggest, most critical vulnerability of the last decade” – which puts it in the running for a place among the biggest glitches in modern computing history. Researchers have warned that the flaw affects servers run by tech giants like Microsoft, Apple, Amazon, and Twitter.

The first indication about the exploit was seen on sites that hosted servers for the hugely popular Microsoft-owned online game Minecraft. Marcus Hutchins, the British security researcher known for halting the WannaCry malware attack, tweeted that apparently some of the game’s users were already using the flaw to remotely run programs on the computers of other users by “simply pasting a short message into a chat box.”


The vulnerability, which is located in ‘log4j’ – an open-source logging tool developed by the Apache Software Foundation – was first reported on November 24 by Chinese tech giant Alibaba. The foundation then rated the severity of the problem at 10 on a scale of one to 10. However, the flaw was only publicly revealed on Thursday.

The logging software is used by Amazon Web Services and other cloud server providers as well as industry and government networks. Logging refers to a process where applications keep a running tab on activities they have performed that can later be reviewed to check for errors. Nearly every network security system uses a logging process, which hints at the scale of the problem.

Noting that hackers had “fully weaponized” the exploit shortly after it was revealed, Adam Meyers – senior vice president of intelligence at cybersecurity firm Crowdstrike – told the AP that the “internet’s on fire right now” as experts raced to patch the flaw while new tools to exploit it were being distributed.

Although a security fix to the log4j tool has been released, Log4Shell will remain a threat during the time it takes to ensure that all vulnerable machines are updated.

Newsletter

Related Articles

TIMES.KY
Close
0:00
0:00
2 earthquakes in Turkey killed over 2,300 people
Powerful Earthquake Strikes Turkey and Syria, Killing More Than 1,300 People.
Turkish photographer Ugur Gallenkus portrays two different worlds within a single image. Brilliant work
Tennessee Bill Would Imprison People for 3 Years If They 'Lie' About Rape to Get an Abortion.
Charlie Munger, calls for a ban on cryptocurrencies in the US, following China's lead
EU found a way to use frozen Russian funds
First generation unopened iPhone set to fetch more than $50,000 at auction.
WARNING GRAPHIC CONTENT - US Memphis Police murdering innocent Tyre Nichols
Almost 30% of professionals say they've tried ChatGPT at work
Interpol seeks woman who ran elaborate exam cheating scam in Singapore
What is ChatGPT?
Bill Gates is ‘very optimistic’ about the future: ‘Better to be born 20 years from now...than any time in the past’
Tesla reported record profits and record revenues for 2022
Prince Andrew and Virginia Giuffre Photo Is Fake: Ghislaine Maxwell
Opinion | Israel’s Supreme Court Claims a Veto on Democracy
Moonwalker Buzz Aldrin Gets Married On His 93rd Birthday
Who’s Threatening Israeli Democracy?
Federal Reserve Probes Goldman’s Consumer Business
China's first population drop in six decades
Microsoft is finalising plans to become the latest technology giant to reduce its workforce during a global economic slowdown
China's foreign ministry branch in Hong Kong urges British gov't to stop the biased and double standards Hong Kong report
Tesla slashes prices globally by as much as 20 percent
1.4 Million Copies Of Prince Harry's Memoir 'Spare' Sold On 1st Day In UK
After Failing To Pay Office Rent, Twitter May Sell User Names
Lisa Marie Presley, singer and daughter of Elvis, dies aged 54
FIFA president questioned by prosecutors
Britain's Sunak breaks silence and admits using private healthcare
Hype and backlash as Harry's memoir goes on sale. Unnamed royal source says prince 'kidnapped by cult of psychotherapy and Meghan'
Saudi Arabia set to overtake India as fastest-growing major economy this year 
Google and Facebook’s dominance in digital ads challenged by rapid ascent of Amazon and TikTok
FTX fraud investigators are digging deeper into Sam Bankman-Fried's inner circle – and reportedly have ex-engineer Nishad Singh in their sights
TikTok CEO Plans to Meet European Union Regulators
UK chaos: Hong Kong emigrants duped by false prospectus
France has banned the online sale of paracetamol until February, citing ongoing supply issues
Japan reportedly to give families 1 million yen per child to move out of Tokyo
Will Canada ever become a real democracy?
Hong Kong property brokerages slash payrolls in choppy market
U.S. Moves to Seize Robinhood Shares, Silvergate Accounts Tied to FTX
Effect of EU sanctions on Moscow is ‘less than zero’ – Belgian MEP
Coinbase to Pay $100 Million in Settlement With New York Regulator
FTX assets worth $3.5bn held by Bahamas securities regulator
A Republican congressman-elect is under investigation in New York after he admitted he lied about his education and work experience.
Brazilian football legend Pele, arguably the greatest player ever, has died at the age of 82.
Hong Kong to scrap almost all its Covid rules
EU calls screening of travellers from China unjustified
US imposes Covid testing for visitors from China
Ukraine President Volodymyr Zelenskyy Addresses Joint Session of Congress - FULL SPEECH
If a country is denied the right to independence by another, it is not in a union. It is in a dictatorship.
Where is Rishi? Chancellor Jeremy Hunt's excuses about the UK's economic challenges just don't make sense
Former FTX CEO Bankman-Fried finally arrested in Bahamas after U.S. files charges
×