Cyber threat analyst Anis Haboubi warns of a critical flaw in the Apache Log4j2 library that threatens global finance. The logging configuration flaw, allowing remote exploitation by attackers, remains a serious issue for various industries despite addressing attempts by Apache. The flaw poses a particular threat to ISO-certified companies Sisense and Snowflake, used extensively by the finance sector, potentially leading to catastrophic consequences due to unauthorised access and exfiltration of sensitive financial data.

COOKIE SPIDER’s Malvertising Drops New SHAMOS macOS Malware – Hackread
COOKIE SPIDER’s Malvertising Drops New SHAMOS macOS Malware Hackread