Last December, Veracode reported that more than a third of Java applications still use vulnerable versions of the Log4j Java logging library. This after many engineering teams dropped their regular work and spent their time remediating the remotely exploitable Log4Shell vulnerability that infected many instances of Log4j. After more than two years of finding and updating […]

The post Companies Didn’t Prioritize Third-Party Sources of CVEs, Here’s What Happened appeared first on Azul | Better Java Performance, Superior Java Support.

The post Companies Didn’t Prioritize Third-Party Sources of CVEs, Here’s What Happened appeared first on Security Boulevard.

Azul

Source: Security Boulevard
Source Link: https://securityboulevard.com/2024/04/companies-didnt-prioritize-third-party-sources-of-cves-heres-what-happened/