This past Thursday, December 9th, a 0-day exploit in the Java logging library, log4j (version 2) was discovered. This vulnerability results in Remote Code Execution by logging a certain string.

The critical Log4J bugs ... risky hardcoded secrets in source code and configuration files for Java and Python applications, like passwords and API access keys. The brand-new features for CodeGuru ...