Survey: Recovery from Log4Shell vulnerability is ongoing with 77% of organizations still in patching mode


New research shows that the weakness shattered confidence in cloud defenses and motivated a new set of cybersecurity priorities.

How the Log4Shell vulnerability has impacted cybersecurity
Image: Valtix

Log4Shell was a cybersecurity wake up call across every industry, according to new research from cloud security provider Valtix. The report found that 77% of the 200 respondents are still dealing with patching. Also, the vulnerability has negatively impacted the ability of IT teams to address business needs.

The survey found that tech leaders are prioritizing new tools, process changes and additional budget to address the weakness.

SEE: Log4Shell: Still out there, still dangerous, and how to protect your systems

In March 2022, Valtix worked with an independent research firm to survey 200 cloud security leaders to understand how the vulnerability has influenced security teams. The study shows how cloud security leaders are changing the way they secure cloud workloads in the aftermath of Log4Shell.

The research found that 78% of IT leaders still lack clear visibility into what’s currently happening in their cloud environment:

  • 82% say visibility into active security threats in the cloud is usually obscured
  • 86% agree it’s more challenging to secure workloads in a public cloud than on-prem
  • Only 53% feel confident that all of their public cloud workloads and APIs are fully secured against attacks from the internet

Additionally, almost all respondents confirmed challenges associated with bringing endpoint security agents and firewall appliances to the cloud from their data centers with:

  • 79% agreeing that agent-based security solutions are difficult to operationalize in the cloud
  • 88% stated that bringing network security appliances to the cloud is challenging to the cloud computing operating model

Vishal Jain, co-founder and CTO at Valtix, said Log4Shell proved that defense in depth is essential even in the cloud because there is no such thing as an invulnerable app.

“Log4Shell exposed many of the cloud providers’ workload security gaps as IT teams scrambled to mitigate and virtual patch while they could test updated software,” Jain said. “They needed more advanced security for remote exploit prevention, visibility into active threats, or ability to prevent data exfiltration.”

Davis McCarthy, a principal security researcher at Valtix, said the research shows they are taking action in 2022 by prioritizing new tools, process changes and budget as it relates to cloud security.

The study authors also found that technical leaders in the energy industry are the most likely to have low confidence in their cybersecurity due to Log4Shell, followed by hospital and travel companies, automotive, government and financial services. Financial services companies were the most likely to have reprioritized cloud security initiatives after the vulnerability surfaced.

Understanding and fixing the Log4Shell vulnerabilities

Here’s how the vulnerability works:

  1. Log4j2 supports a logging feature called Message Lookup Substitution, which enables special strings to be replaced, during the time of logging, by other dynamically generated strings.
  2. One of the lookup methods (JNDI paired with LDAP) fetches a special class from a remote source to deserialize it, which executes some of the class code.
  3. Any part of the logged string can then be controlled by a remote attacker.

In a recent article, TechRepublic contributor Jack Wallen explained how to use the Log4j Detect script to scan Java projects for the vulnerability. This requires a Java project and a user with sudo privileges. This script can be used on Linux, macOS and Windows.

 



Source link

istanbul escort aksaray escort arnavutköy escort ataköy escort avcılar escort avcılar türbanlı escort avrupa yakası escort bağcılar escort bahçelievler escort bahçeşehir escort bakırköy escort başakşehir escort bayrampaşa escort beşiktaş escort beykent escort beylikdüzü escort beylikdüzü türbanlı escort beyoğlu escort büyükçekmece escort cevizlibağ escort çapa escort çatalca escort esenler escort esenyurt escort esenyurt türbanlı escort etiler escort eyüp escort fatih escort fındıkzade escort florya escort gaziosmanpaşa escort güneşli escort güngören escort halkalı escort ikitelli escort istanbul escort kağıthane escort kayaşehir escort küçükçekmece escort mecidiyeköy escort merter escort nişantaşı escort sarıyer escort sefaköy escort silivri escort sultangazi escort suriyeli escort şirinevler escort şişli escort taksim escort topkapı escort yenibosna escort zeytinburnu escort porno 1080p porno izle 4k porno izle 720p porno izle abella danger alman alman porno alman porno izle aloha tube porno amatör amatör porno amatör porno izle anal anal porno anal porno izle arap porno asa akira porno asyalı porno bangbros porno bangbros porno izle banyoda sikis başörtülü porno beeg porno izle beyaz tenli porno izle biseksuel porno izle bisexsuel porno brandi love porno brazzers brazzers porno izle canli porno canli porno izle çinli porno çinli porno izle ensest porno ensest porno izle ensest seks erotik porno erotik porno izle esmer porno esmer porno izle etek altı fake agent fake taxi fake taxi porno fantazi pornoları fantezi porno izle fetiş porno fetiş porno izle fetish fransız porno fransız porno izle full hd hg porno izle gangbang porno genç kız porno izle genç kız sikişi genç teen porno izle gizli çekim porno gizli çekim pornosu grup pornosu grup porno grup porno izle hd pornolar hd porno hd porno izle hemşire porno hemşire pornosu hizmetçi porno hizmetçi porno izle ingiliz porno japon pornoları japon porno kızlık bozma kızlık bozma porno izle konulu porno konulu porno izle koreli porno köylü pornoları kumral porno kumral porno izle latin pornoları latin porno latin porno izle lezbiyen pornoları lezbiyen porno lezbiyen porno izle lisa ann porno liseli pornoları liseli porno liseli porno izle manken porno manken porno izle masaj porno izle masturbasyon porno izle masturbasyon pornoları mature porno mia khalifa porno mia malkova porno milf porno izle mobil porno mobil porno izle öğrenci porno izle öğretmen porno izle okul porno izle olgun kadın pornosu olgun porno oral porno oral porno izle oral seks porna izle pornhub pornhub porno izle porno film izle porno indir porno izle porno resimler porno star porntube porno izle redtube redtube pornoları riley reid porno rokettube rus pornoları rus porno rus porno izle sakso blowjob porno izle sarışın pornoları sarışın porno sarışın porno izle sarışın pornoları sekreter porno shemale sikiş sikiş sikiş izle şişman porno siyahi pornoları suriyeli pornoları swinger porno tecavüz porno teen porn türbanlı pornoları türbanlı porno türk pornoları türk porno türk porno izle türkçe altyazılı porno türkçe altyazılı porno izle xhamster pornoları xhamster porno xhamster porno izle xnxx xnxx porno xnxx porno izle xvideos xvideos porno izle yaşlı porno yeşilçam porno izle youjizz youporn youporn porno izle zenci porno güvenilir bahis siteleri bahis siteleri casino deneme bonusu casino siteleri deneme bonusu para yatırma bonusu bahis siteleri casino siteleribahis sitesi para yatırma