Winet Is Not Affected by Critical Java Security Vulnerability
A rumor has been circulating since this week serious security vulnerability (also known as a zero-day vulnerability) in the Java software library (log4j), which has since threatened many programs and half the Internet. The National Center for Cybersecurity (NZCS) has IT Threat Level 4 / Red proclaimed: https://www.ncsc.admin.ch/ncsc/de/home/aktuell/im-fokus/log4j.html
All is well for Winet customers and partners:
✅ Winet's products and services are not affected by the Java security vulnerability currently circulating and can continue to be used without concern.
This IT threat is compromising half the Internet. A zero-day vulnerability that exploits a flaw in the Java software Log4j is leaving numerous servers, programs, and apps vulnerable. Cybersecurity experts worldwide are issuing warnings.
Cause and Effect
Many applications and online services written in the Java programming language are vulnerable due to a previously unknown Java Security Vulnerability vulnerable.
On December 9, IT security experts and various websites drew attention to a zero-day vulnerability in the Java logging library Log4j. The vulnerability, now designated «CVE-2021-44228,» could allow attackers to malware on affected computers execute. This IT threat, known as remote code execution (RCE), is considered one of the most potentially devastating types of attacks.
According to IT security agencies in various countries, attacks have already taken place. Apparently, information about the vulnerability and an exploit tool used in the attacks has been published online.
Which services are affected?
Several million apps, programs, and services from various vendors use log4j for logging. These primarily include the following vendors and services:
- Apple
- Steam
- Tesla
- Apache Applications (Struts, Solr, and Druid)
- Redis
- ElasticSearch
- Online games like «Minecraft»
What can be done to counter this threat?
Since the security vulnerability emerged, many server administrators (admins) have been working to protect their software and programs and are trying to secure their systems. The first software updates («patches») have only recently become available.
Internet users should be especially cautious in the coming days and, above all, must rely on providers to install the patch quickly.