Log4j was an eye opener for many here at GoSecure. Not from a technology or security perspective, we have that covered in spades; but just how quickly the GoSecure Titan team can respond and remediate a vulnerability in a dependency. We are starting to appreciate the...
Log4J has been in the spotlight for the past two weeks for a new attack vector which relies on Java Naming and Directory Interface (JNDI). Log4J 2.15 vulnerabilities are now considered high severity (9.0). And as the GoSecure research team investigated, we realized...
Updated January 31, 2022 The following Log4Shell vulnerabilities have been evaluated and have no impact on GoSecure Products: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 Due to the severity of the Log4Shell vulnerability (CVE-2021-44228, CVE-2021-45046,...
GoSecure ethical hackers found a bug in MySQL that has security consequences. As a result, AWS Web Application Firewall (WAF) customers were left unprotected to SQL injection. Our research team further confirmed modsecurity to be affected, but protection is within...
FR
