Microsoft has issued a warning to all users of Windows and the cloud computing service “Azure” about a malicious vulnerability in a program called “Log4j” that has been exploited by hackers and cybercriminals since last December, and is considered one of the most dangerous malicious holes in the world, saying that customers may not be aware How widespread is the “Log4j” problem in their devices.
Cybersecurity Foundation Discovered “Apache Software” Log4j vulnerability Last December 9, and it will likely take years to overcome given the extent to which this software component is used in millions of applications and services spread across the Internet and used by most Internet pioneers, as cybersecurity experts believe that hundreds of millions of devices are affected by “Log4j”, according to the website “Log4j”. Znet e-mail.
What is the Log4j vulnerability?
Hackers can use the defect found in the Log4j program, which is included in the configuration of almost all Internet sites and applications, to control the Internet management servers and use them for their own purposes, and this in turn leads them to obtain all the data on these servers, whether medical records, photos or Bank data, they can completely lock these servers, blackmail companies and demand ransom.
Updates facing the critical vulnerability
Over the past month, it released Microsoft Several updates, including Defender security software, to help customers identify the issue as attackers ramp up their activity. We have observed that many current attackers are adding holes to these vulnerabilities in their existing malware packages and tactics.”
Microsoft added that customers should assume that there is a real and present danger to their devices, and therefore “we encourage customers to protect and secure themselves.” It also noted that “hackers” use many of the same techniques to identify targets, and that there are sophisticated adversaries and professional attackers who exploit these Security vulnerabilities, there is a high probability of extended use of these vulnerabilities.
Microsoft has released new information about “Log4j” for managing threats and security vulnerabilities in the Microsoft 365 Defender portal for “Windows 10”, “Windows 11” and “Linux”, and this is aimed at helping customers find and fix files, programs and devices affected by Log4j vulnerabilities.
.