The Log4Shell vulnerability in the Log4j logging services framework, heavily used by Java developers, is still a viable threat a year after its disclosure. Experts suggest companies protect themselves against such software supply chain attacks by implementing security controls to buy time for a fix. Security teams should also use a web application and API protection solution, invest in Runtime Application Self-Protection, and adopt a micro-segmentation approach for network security.

Network level risk management key to medical device security
In today’s healthcare, medical devices are crucial but vulnerable, as noted by the European Commission’s NIS2 directive. To combat cybersecurity threats, Palo Alto Networks has