The Log4Shell vulnerability in the Log4j logging services framework, heavily used by Java developers, is still a viable threat a year after its disclosure. Experts suggest companies protect themselves against such software supply chain attacks by implementing security controls to buy time for a fix. Security teams should also use a web application and API protection solution, invest in Runtime Application Self-Protection, and adopt a micro-segmentation approach for network security.

SonicWall CEO Bob VanKirk hails ‘pivotal moment’ as firm unveils new MSP cyber solutions
The company is broadening its Managed Service Provider (MSP) solutions and increasing its emphasis on platform-based security.