News

SD Times3y
SD Times news digest: SnapLogic raises $165 million; Vulnerability found in log4j 2; December release of Python for VS Code - SD Times
This past Thursday, December 9th, a 0-day exploit in the Java logging library, log4j (version 2) was discovered. This vulnerability results in Remote Code Execution by logging a certain string.
ZDNet3y
AWS's AI code reviewer now spots Log4Shell-like bugs in Java and Python code - ZDNET
Amazon Web Services (AWS) has updated the 'detectors' in its CodeGuru Reviewer tool to seek out log injection flaws like the recently disclosed Log4Shell bug in the popular Java logging library Log4J.