The Log4j zero-day vulnerability, also referred to as Log4Shell, was discovered in December 2021. This open-source software vulnerability allows attackers to inject malicious code which can be executed on the system, posing a significant risk due to the wide number of impacted systems and lack of available patch. Log4j remains an ongoing threat, particularly for systems that aren’t operating on the most recent, patched versions.

CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users
Meta Mirage, a new global phishing threat, has been discovered. Cybersecurity researchers at CTM360 revealed that it targets businesses using Meta’s Business Suite and impersonates