Apache scrambled to release patches for Log4Shell in December 2021, although some vulnerabilities remained. Despite the initial response, around a quarter of Log4j downloads from the Apache repository Maven Central still contain vulnerable versions a year later. This comes despite fixes being available, reflecting a lack of awareness or understanding among developers about the contents of their software.

NS Power customers’ personal information taken in ‘cyber incident’ – CTV News
NS Power reported a cyber incident that compromised customers’ personal information. The utility company informed affected customers about the breach, emphasizing that it takes such