Not sure if this is the correct forum for this, but the news channels on the internet have been going nuts about this zero day exploit and I don't see anything on tenforums about it. Has MS issued any updates or patches for this? Norton and MB don't see anything. Is Chicken Little running loose again? Thanks.
Microsoft doesn't own this Java related problem:
New zero-day exploit for Log4j Java library is an enterprise nightmare
Log4J "Log4Shell" Zero-Day Vulnerability: Impact and Fixes - FOSSA
Yeah, I see it's Apache's problem, not MS so much. Was hoping someone had a patch out to block the bad Java code. Not sure how muck danger there is to my single home system, but was just trying to be proactive.
From Microsoft 365 Defender Threat Intelligence Team
Microsoft Threat Intelligence Center (MSTIC)
"December 11, 2021
Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation"
https://www.microsoft.com/security/b...-exploitation/
Also some more information here, especially for those running their own (open ?) Minecraft servers :
Understanding The Recent RCE Exploit For Minecraft And What It Actually Means | Hypixel - Minecraft Server and Maps
PSA: there is a fatal remote code execution exploit in minecraft, and it's by typing in chat | Hypixel - Minecraft Server and Maps
Zero-day in ubiquitous Log4j tool poses a grave threat to the Internet | Ars Technica
An article from ZDNET.
Log4j zero-day flaw: What you need to know and how to protect yourself | ZDNet
Haven't seen anything I as a Windows 10 Home user need to do, aside from not playing Minecraft.
I agree, but a lot of folks are still working from home and many are not using employer supplied gear other than maybe software. This exploit seems to be way more pervasive than previous problems. My son often works remotely and uses his own system to access the company applications. Have set Norton on my system to run every night, just in case.
Quote