Blumira research team has discovered an alternative attack vector in the Log4j vulnerability that relies on a basic Javascript WebSocket connection to trigger the RCE locally via drive-by compromise.
Top-of-mind security issues entering the New Year
-
Hear from Security’s Editorial Advisory Board members on their top-of-mind critical issues facing the industry right now.
https://www.securitymagazine.com/articles/96716-top-of-mind-security-issues-entering-the-new-year