Cyber Pandemic Update –
Critical Vulnerability in Apache Log4j

Are you affected by the Log4j vulnerability?
Everything you need to know about this vulnerability, including how to stay protected, and how it is evolving worldwide.

Watch our webinar and read below to learn more.

WATCH ON DEMAND

Apache Log4j2

To get immediate support from our Incident Response Team on Log4j CLICK HERE

email log4j support

Contact Us

For any questions or inquiries concerning the Log4j vulnerability please email
Log4j@checkpoint.com

cloudguard log4j support

30 Days Free AppSec & Free Lifetime Protection Against Log4j Exploits

The Only Security Solution Which Pre-Emptively Prevented the Log4j Exploit!
GET IT NOW

icon scan log4j

Scan Now for Log4j Vulnerabilities

A fully automated and extensive scanner for finding vulnerable log4j public hosts
SCAN NOW

Best Practice: Identifying and Mitigating the Impact of Sunburst

Apache Log4j Vulnerability – what do you need to know?

Apache Log4j is the most popular java logging library with over 400,000 downloads from its GitHub project. It used by a vast number of companies worldwide, enabling logging in a wide set of popular applications. Exploiting this vulnerability is simple and allows threat actors to control java-based web servers and launch remote code execution attacks. Read more insights from our Check Point Research team

READ MORE

What you need to do to stay protected with Check Point Infinity

Check Point Infinity powered by Threat Cloud and AI-based prevention provides protection against the Log4j Vulnerability. Read more on how to stay protected.

READ MORE

Amount of attacks

The numbers behind a cyber pandemic – detailed dive

Precisely one year after the SolarWinds Hack, the groundbreaking supply chain attack the world experienced, and while organizations are still struggling to protect the software supply chain from third-party risk, the Apache Log4j vulnerability exploit has caught security teams during a weekend.

READ MORE

TechTalk Special Edition: What you need to know about log4j and how to protect your organization

In this CheckMates TechTalk Special Edition, Lotem Finklesteen, Director of Threat Intelligence and Research and Yaniv Shechtman, Head of Product Management, Threat Prevention tell you what you need to know about log4j and how you can protect your organization.

WATCH VIDEO

play log4j video

How to protect web applications from the Log4j vulnerability

CloudGuard AppSec is the only solution providing pre-emptive protection for your web applications against the Log4j vulnerability. CloudGuard AppSec protects against these kinds of attacks out of the box with zero-day protection when set to Prevent Mode. CloudGuard AppSec is powered by AI, with no signature matching or manual updates to the security.

READ MORE FREE PROTECTION

Log4j vulnerability protection for endpoints

Check Point implemented dedicated detection and prevention enhancements to Harmony Endpoint to ensure full protection against log4j related attacks and to accelerate detection and investigate vulnerable endpoints.

READ MORE

Endpoint Email Blog

log4j

A deep dive into a real-life Log4j exploitation

Check Point Research recently detected numerous attacks exploiting the Log4j vulnerability, involving the mining of cryptocurrencies.

LEARN MORE HERE

The Laconic Log4Shell FAQ

Log4shell: Why is it such a big deal? What mitigations are available? Why are there so many complicated exploit variants? This piece surveys how we got here, and how we might avoid repeating history.

LEARN MORE

CPR logo

log4j pandemic visualization

Log4j – A true cyber pandemic

When we discussed the Cyber pandemic, this is exactly what we meant. It is clearly one of the most serious vulnerabilities on the internet in recent years.
Check Point Research witnessed new variations of the original exploit being introduced rapidly- over 60 in less than 24 hours.
Since we started to implement our protection we prevented over 845,000 attempts to allocate the vulnerability, over 46% of those attempts were made by known malicious groups.

VIEW INFOGRAPHIC
×
  Feedback
Questo sito web utilizza cookies per la sua funzionalità e per scopi di analisi e marketing. Continuando a utilizzare questo sito Web, accetti l'utilizzo dei cookies. Per ulteriori informazioni, leggere la nostra Informativa sui cookie.
OK