Log4j Resource Center

Last updated: October 21, 2024

This Log4j Resource Center is a collection of some of our advisories, articles, and case studies put together for the infosec community.

What is Log4j?

The Java logging library, Log4j, is a ubiquitous software used to record activities in a wide range of systems found in consumer-facing products, enterprise software, and web applications. Recently, a serious vulnerability in this popular package, CVE-2021-44228, was disclosed in Log4j versions 2.0 to 2.14.1, posing a severe risk to millions of software and web apps. An exploit known as “Log4shell” was publicly disclosed in December 2021 and it is highly recommended this flaw be patched as soon as possible.

Webinar

Live Demo: 5 Reasons to Unify Application Risk Findings and How Balbix does it

Join this webinar to learn how unifying application, infrastructure, and cloud risk insights can enhance collaboration, prioritize threats, and streamline security workflows for smarter, faster remediation.

Vinay Sridhara
Vinay Sridhara
CTO and Head of Engineering, Balbix
Umang Barman
Umang Barman
VP of Marketing, Balbix
December 12
9:00am PT

Recent Blogs

                    

Other Resources

           

Recommended Resources

How to Calculate Your Enterprise's Breach Risk - Cyber Risk Quantification
EBook
A CISO Guide to Calculating Breach Risk in Monetary Terms
9 Slides Every CISO Must Use in Their 2024 Board Presentation
Presentation
Essential Slides for Your 2024 CISO Board Presentation
Oerlikon case study
Case Study
Oerlikon Reduces Patch Time and Improves Management-Level Cyber Risk Visibility