צ׳אט מחקר שמצטט את המקורות שלו.

Is CVE-2021-44228 exploited in the wild? What should we check first on our own Java services?

NotHoly

Thought for 8s

Is CVE-2021-44228 (Log4Shell) exploited in the wild?

Yes, very much so — this is about as confirmed as wild exploitation gets:

• CISA KEV: Listed since 2021-12-10, with remediation due by 2021-12-24, and it is flagged as known to be used in ransomware campaigns 2.
• EPSS: 0.99999 (top percentile) — essentially the maximum predicted exploitation probability 3.
• CVSS: 10.0 CRITICAL, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H — network-exploitable, no privileges or user interaction, full compromise 1.