Vulnerabilities
AWS patches OS command injection in Log4j hotpatch tool
Amazon Linux users must update the log4j-cve-2021-44228-hotpatch package to fix a local privilege escalation flaw.
Log4j
Everything Threat Times has reported about Log4j: 2 stories, newest first. Part of our Tech News coverage.
Tech News
Report: Critical Open-Source Software Relying on Few Maintain
A new analysis reveals that many essential open-source projects are maintained by only one or two volunteers, creating significant security risks for modern computing infrastructure.