Log4Shell (CVE-2021-44228) is a remote code execution vulnerability affecting some versions of Log4J, particularly Apache Log4J 2 (versions 2.14.1 and earlier). This flaw stems from how these versions handle Java Naming and Directory Interface (JNDI) lookups. It allows hackers to execute malicious code remotely by tricking this older JNDI functionality into executing a download command from a server containing malware.

Vidar & StealC 2.0 Released by Threat Actors With a Complete New Build
Cybersecurity experts have identified major updates to two prominent info-stealers, Vidar and StealC, that feature enhanced capabilities and up-to-date user interfaces. Intriguingly, both versions incorporate