Cyber threat analyst Anis Haboubi warns of a critical flaw in the Apache Log4j2 library that threatens global finance. The logging configuration flaw, allowing remote exploitation by attackers, remains a serious issue for various industries despite addressing attempts by Apache. The flaw poses a particular threat to ISO-certified companies Sisense and Snowflake, used extensively by the finance sector, potentially leading to catastrophic consequences due to unauthorised access and exfiltration of sensitive financial data.

North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to