La minaccia di Log4Shell ora si estende a Stati e banche

Cos’è e perché è una minaccia

I ricercatori hanno scoperto una vulnerabilità in Log4j, una libreria usata dalla stragrande maggioranza programmatori di software con linguaggio Java che consente di scrivere nel software quelli che vengono chiamati ‘log’, ovvero degli ‘status’ del software stesso che permettono di fotografare un momento dello sviluppo del software stesso, registrando stati di avanzamento, perfomance, problemi e soluzioni.

Portata della vulnerabilità

Log4j è utilizzato in molte forme di software aziendale e open source, comprese piattaforme cloud, applicazioni Web e servizi di posta elettronica. Ciò significa che esiste un’ampia gamma di software che potrebbero essere a rischio dai tentativi di sfruttare la vulnerabilità.

Come spiega Agi, “Java è su circa 3 miliardi di dispositivi. E Log4j, sviluppato da Apache, è usato da quasi tutti i programmatori. Per dare un’idea del suo utilizzo e della sua affidabilità basti pensare che anche Ingenuity, l’elicottero della Nasa atterrato sul suolo di Marte lo scorso febbraio, ha un software che usa Log4j, come la stessa Apache ha reso noto sul proprio profilo Twitter”.

Le conseguenze

Questa vulnerabilità permette all’attaccante di eseguire da remoto sul sistema obiettivo vulnerabile dei comandi non autorizzati. L’attaccante ha così il pieno accesso alla macchina. Potrà sottrarre i dati, trasformarla in un vettore di attacco, e muoversi lateralmente all’interno dell’infrastruttura per attuare azioni malevoli.

Quali dispositivi sono colpiti ?

La vulnerabilità Log4Shell (LogJam) può colpire tutti quei dispositivi che usano Java o software che usano il linguaggio Java e la libreria Log4j.

In pratica, miliardi di dispositivi nel mondo usano software che contengono librerie Java e questa libreria nello specifico. Questo significa che non in tutti i casi l’utente finale può sapere quali software che utilizza sono al momento potenzialmente vulnerabili.

Quel che è chiaro, è che le imprese sono quelle più esposte e vulnerabili. Imprese di ogni dimensione, dalle grandi alle piccole, potrebbero essere prese direttamente o indirettamente di mira. Basta infatti utilizzare un software che fa uso della libreria Apache Log4j per cadere potenzialmente vittima di un attacco generalizzato al software in questione.

Come difendersi

Oracle, la società che distribuisce la tecnologia software Java, ha già rilasciato degli aggiornamenti del suo software.

Quindi, è molto importante che chi ha Java installato sul computer di casa, o altri dispositivi, effettui l’aggiornamento all’ultima versione disponibile. Sul sito web https://www.java.com/it/ è possibile scaricare l’aggiornamento, in alternativa basta aprire il software Java, già installato sul computer (o notebook), ed effettuare una ricerca degli aggiornamenti.

La Apache Foundation ha di suo aggiornato la libreria Log4j più volte negli ultimi giorni, l’ultima versione disponibile è la 2.16.0 del 13 dicembre. La Fondazione sta chiedendo agli sviluppatori di software che hanno implementato la libreria nei propri software di aggiornare all’ultima versione.

Per proteggere i propri server viene inoltre consigliato di utilizzare un software di sicurezza informatica. Nel caso in cui già si utilizzino software di protezione, è importante aggiornarli all’ultima versione resa disponibile.

Gli utenti privati possono cogliere questa occasione per effettuare un aggiornamento completo di tutti i software installati sul proprio computer di casa o di lavoro, o di ufficio, con l’obiettivo di proteggersi da questi e altri attacchi.

Categories:

385 Responses

  1. Meilleure application de contrôle parental pour protéger vos enfants – Moniteur secrètement secret GPS, SMS, appels, WhatsApp, Facebook, localisation. Vous pouvez surveiller à distance les activités du téléphone mobile après le téléchargement et installer l’apk sur le téléphone cible.

  2. I like what you guys are up too. Such smart work and reporting! Carry on the excellent works guys I have incorporated you guys to my blogroll. I think it will improve the value of my web site :).

  3. Thanks for sharing excellent informations. Your web-site is so cool. I am impressed by the details that you¦ve on this web site. It reveals how nicely you understand this subject. Bookmarked this web page, will come back for extra articles. You, my pal, ROCK! I found simply the information I already searched all over the place and just could not come across. What an ideal site.

  4. You can definitely see your skills within the paintings you write. The arena hopes for more passionate writers like you who aren’t afraid to mention how they believe. All the time go after your heart.

  5. I¦ve been exploring for a little bit for any high quality articles or weblog posts in this sort of space . Exploring in Yahoo I finally stumbled upon this site. Studying this info So i¦m glad to exhibit that I have an incredibly just right uncanny feeling I discovered exactly what I needed. I so much certainly will make certain to do not put out of your mind this site and provides it a glance regularly.

  6. I am really loving the theme/design of your website. Do you ever run into any internet browser
    compatibility problems? A small number of my blog audience have complained about my site
    not operating correctly in Explorer but looks great in Safari.
    Do you have any recommendations to help fix this issue?

    My web site testoprime review

  7. I was very happy to find this net-site.I wished to thanks for your time for this excellent read!! I positively having fun with each little bit of it and I’ve you bookmarked to take a look at new stuff you weblog post.

  8. Everything posted made a great deal of sense. However, what about this?
    what if you were to create a awesome title? I ain’t
    saying your information is not solid, but what if you added a title to maybe grab folk’s attention? I mean Log4j, ecco la nuova minaccia informatica per tutto il mondo – FefeWeb is kinda vanilla.

    You ought to look at Yahoo’s home page and see how they
    create post headlines to grab people to click. You might
    add a video or a related picture or two to get people excited about what you’ve got
    to say. Just my opinion, it might bring your posts a little bit more interesting.

    My blog: dentavim ingredients list

  9. Magnificent goods from you, man. I’ve understand your stuff
    previous to and you are simply too magnificent.
    I actually like what you have obtained right here, certainly like
    what you’re saying and the way in which through which you say it.
    You are making it enjoyable and you still care
    for to stay it wise. I can’t wait to read much more from you.
    That is really a wonderful web site.

    Feel free to surf to my site :: is lottery defeater software legit

  10. hello there and thank you to your information – I’ve definitely picked up anything new from right here. I did however expertise several technical issues the usage of this website, as I experienced to reload the web site lots of times previous to I may just get it to load correctly. I were thinking about if your hosting is OK? No longer that I’m complaining, however sluggish loading cases occasions will very frequently have an effect on your placement in google and can injury your quality rating if advertising and ***********|advertising|advertising|advertising and *********** with Adwords. Anyway I am adding this RSS to my email and could glance out for a lot more of your respective intriguing content. Make sure you replace this again soon..

  11. Just want to say your article is as surprising.
    The clarity in your post is simply nice and i can assume you are an expert on this subject.
    Fine with your permission allow me to grab your RSS feed to keep up to date with forthcoming
    post. Thanks a million and please carry on the rewarding
    work.

    Here is my web-site … nerve pro 6

  12. I’m truly enjoying the design and layout of your site.
    It’s a very easy on the eyes which makes it much more pleasant
    for me to come here and visit more often. Did you hire
    out a developer to create your theme? Outstanding work!

    Also visit my web blog … ULTRA K9 PRO

  13. Hello there! This article could not be written any better!
    Looking through this article reminds me of my previous roommate!
    He always kept talking about this. I most certainly will forward this article to him.
    Fairly certain he’s going to have a very good read.

    Thanks for sharing!

    Feel free to surf to my webpage … nerve fresh

  14. You are so interesting! I don’t believe I have read something like
    that before. So great to find another person with original
    thoughts on this subject matter. Really.. many thanks for
    starting this up. This site is one thing that is required on the internet,
    someone with a little originality!

    Also visit my web site vigrx plus directions

  15. Its like you read my mind! You appear to know so much about this, like you wrote the book in it or something.
    I think that you can do with a few pics to drive the message home a bit, but other than that, this is great blog.
    A fantastic read. I will definitely be back.

    Feel free to surf to my website … vigrx plus

  16. This design is spectacular! You most certainly know how to keep
    a reader entertained. Between your wit and your videos, I was almost moved to start
    my own blog (well, almost…HaHa!) Excellent
    job. I really loved what you had to say, and more than that, how you presented it.
    Too cool!

    Here is my web-site the matrix growth

  17. Can I just say what a relief to find someone who actually knows what theyre talking about on the internet. You definitely know how to bring an issue to light and make it important. More people need to read this and understand this side of the story. I cant believe youre not more popular because you definitely have the gift.

  18. I simply had to thank you so much yet again. I do not know the things that I would’ve achieved without the entire ways revealed by you over my question. This was a real troublesome matter in my position, nevertheless viewing this specialised approach you processed that made me to weep for gladness. I’m just thankful for this assistance and even sincerely hope you realize what an amazing job you’re doing instructing men and women with the aid of your blog post. More than likely you’ve never encountered all of us.

  19. Pretty nice post. I just stumbled upon your weblog and wanted to mention that I’ve truly
    enjoyed browsing your blog posts. After all I will be subscribing in your rss feed and I am hoping you write once more very soon!

    Feel free to visit my site :: fitspresso

  20. Hello would you mind letting me know which web host you’re working with?
    I’ve loaded your blog in 3 completely different internet browsers and I must
    say this blog loads a lot quicker then most. Can you suggest a good web hosting provider at a
    honest price? Thanks, I appreciate it!

    My webpage – prodentim reviews

  21. hey there and thank you for your information – I’ve certainly picked up something new from right here.
    I did however expertise several technical issues using
    this web site, since I experienced to reload the web site
    a lot of times previous to I could get it to load
    properly. I had been wondering if your web host is
    OK? Not that I am complaining, but sluggish loading instances times will very frequently affect your placement in google and can damage
    your quality score if ads and marketing with Adwords.
    Anyway I’m adding this RSS to my email and can look out for much more of your
    respective fascinating content. Make sure you update this again soon.

    My blog – the billionaire brain wave reviews

  22. Today, I went to the beach front with my kids.
    I found a sea shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She placed the shell to her ear and
    screamed. There was a hermit crab inside and it
    pinched her ear. She never wants to go back! LoL I know this is completely off topic but I had to tell someone!

    Also visit my page … the dick growth matrix

  23. I’d have to examine with you here. Which is not one thing I usually do! I take pleasure in reading a post that may make folks think. Additionally, thanks for permitting me to comment!

  24. Please let me know if you’re looking for a article writer for your weblog.
    You have some really good posts and I believe I would be a
    good asset. If you ever want to take some of the load off,
    I’d love to write some content for your blog in exchange for a
    link back to mine. Please blast me an email if interested.
    Kudos!

    my website … item651311760

  25. I believe this web site has some really wonderful information for everyone. “There is nothing so disagreeable, that a patient mind cannot find some solace for it.” by Lucius Annaeus Seneca.

  26. A person essentially assist to make critically posts I would state.
    That is the very first time I frequented your web page and to this
    point? I surprised with the research you made to create this particular put up extraordinary.
    Great activity!

    Look at my web blog :: money wave review

  27. Today, I went to the beachfront with my children. I found a sea
    shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She put the shell to her
    ear and screamed. There was a hermit crab inside and it pinched her ear.

    She never wants to go back! LoL I know this is completely off
    topic but I had to tell someone!

    Here is my web page – tonic greens

  28. An outstanding share! I’ve just forwarded this onto a friend
    who has been conducting a little research on this.

    And he actually bought me lunch simply because I stumbled upon it for him…
    lol. So let me reword this…. Thank YOU for the meal!!
    But yeah, thanks for spending the time to discuss this
    matter here on your internet site.

    Feel free to surf to my webpage … glucofreedom pills

  29. Can I just say what a comfort to uncover an individual who truly knows what they’re discussing on the internet.
    You certainly know how to bring a problem to light and make it important.
    A lot more people should check this out and understand this side
    of the story. I can’t believe you are not more popular since you surely
    possess the gift.

    Feel free to visit my web page :: prodentim logo

  30. Great beat ! I would like to apprentice at the same time as
    you amend your web site, how can i subscribe for a weblog
    web site? The account aided me a applicable deal.

    I were tiny bit acquainted of this your broadcast offered shiny transparent concept

    Also visit my page provadent snopes

  31. I absolutely love your blog and find the majority of your post’s to be just what I’m
    looking for. Does one offer guest writers to write content
    available for you? I wouldn’t mind creating a post or elaborating on a few of the subjects you write with
    regards to here. Again, awesome web log!

    Look into my blog post … boostaro

  32. It’s a pity you don’t have a donate button! I’d
    certainly donate to this fantastic blog! I guess for now i’ll settle for book-marking and
    adding your RSS feed to my Google account. I look forward to
    new updates and will talk about this blog
    with my Facebook group. Chat soon!

    Stop by my website; phenq reviews

  33. I do not even know how I ended up here, but I thought this post was great.
    I do not know who you are but certainly you’re going to a
    famous blogger if you are not already 😉 Cheers!

    Have a look at my page: alphabites

  34. I know this if off topic but I’m looking into starting my own blog and was curious what all is required to
    get set up? I’m assuming having a blog like yours would cost a pretty
    penny? I’m not very web smart so I’m not 100% positive.
    Any recommendations or advice would be greatly appreciated.
    Thank you

    My homepage: alpha bites supplement

  35. Simply wish to say your article is as astonishing. The clearness for your
    submit is simply great and i can assume you’re a professional in this subject.
    Well with your permission let me to clutch your feed to keep updated with imminent post.

    Thanks one million and please carry on the gratifying work.

    Review my web blog :: alpha bites

  36. Its like you read my mind! You appear to know a lot about this,
    like you wrote the book in it or something. I think that you can do with a
    few pics to drive the message home a bit, but other than that, this is fantastic blog.
    A great read. I will definitely be back.

    Take a look at my blog – money wave reviews

  37. Heya exceptional blog! Does running a blog like
    this take a massive amount work? I’ve very little understanding of
    programming however I was hoping to start my own blog in the near future.
    Anyhow, should you have any suggestions or techniques for new blog
    owners please share. I understand this is off topic however
    I just had to ask. Many thanks!

    Also visit my page :: iq blast pro side effects

  38. Virtually all of what you point out happens to be astonishingly appropriate and that makes me wonder why I had not looked at this in this light before. Your piece truly did switch the light on for me personally as far as this specific subject matter goes. However at this time there is one issue I am not necessarily too comfy with and whilst I try to reconcile that with the main theme of your point, permit me observe exactly what all the rest of your visitors have to say.Nicely done.

  39. Hello, I think your blog might be having browser compatibility issues. When I look at your blog site in Firefox, it looks fine but when opening in Internet Explorer, it has some overlapping. I just wanted to give you a quick heads up! Other then that, very good blog!

  40. Howdy just wanted to give you a quick heads up. The text
    in your content seem to be running off the screen in Safari.
    I’m not sure if this is a formatting issue or something to do with internet browser compatibility
    but I thought I’d post to let you know. The design and style look great though!
    Hope you get the issue solved soon. Thanks

    Also visit my web-site – is pro nerve 6 a scam

  41. Good day! I know this is kinda off topic but I was wondering which blog platform are you using for this website?
    I’m getting tired of WordPress because I’ve had issues with hackers and
    I’m looking at options for another platform. I would be awesome if
    you could point me in the direction of a good platform.

    My web page … plantsulin order

  42. I have been surfing online more than 4 hours today, yet I never found
    any interesting article like yours. It is pretty worth enough for me.
    In my view, if all webmasters and bloggers made good content
    as you did, the web will be much more useful than ever before.

    Feel free to surf to my blog post: LipoZem Supplement

  43. After I initially commented I seem to have clicked
    the -Notify me when new comments are added- checkbox and now
    each time a comment is added I get 4 emails with the same comment.

    There has to be a means you are able to remove me from that
    service? Kudos!

    Here is my blog; tonic greens

  44. My partner and I stumbled over here from a different web page and thought I might check things out. I like what I see so now i’m following you. Look forward to looking into your web page yet again.

  45. Hello, Neat post. There’s an issue together with your web site in web explorer, would test this?K IE still is the market chief and a good component of people will omit your great writing because of this problem.

  46. [url=https://fastpriligy.top/]priligy over the counter usa[/url] The enthusiast of the principle of Occam s razor ie, minimize multiplication of entities might consider seeing other functional entities that are known to be associated with pluripotent TrPs, 2, 4, 12, 43, 237, 238 as MPS fibromyalgia that is localized to certain anatomical areas; coupled with the reciprocal central nervous system changes

  47. What’s Going down i’m new to this, I stumbled upon this I have found It positively useful and it has helped me out loads. I hope to contribute & help different customers like its helped me. Great job.

  48. The other day, while I was at work, my cousin stole
    my iPad and tested to see if it can survive a 30 foot drop, just so she can be a youtube sensation. My iPad is now destroyed and she
    has 83 views. I know this is totally off topic but I had to share it with
    someone!

    Visit my page … tonic greens.

  49. Hey there would you mind stating which blog platform you’re using?
    I’m planning to start my own blog soon but I’m having a difficult time making a
    decision between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your design seems different
    then most blogs and I’m looking for something completely unique.
    P.S Sorry for being off-topic but I had to ask!

    Stop by my web blog ingredients of phenq

  50. Hey I know this is off topic but I was wondering if you knew of
    any widgets I could add to my blog that automatically tweet my newest twitter updates.
    I’ve been looking for a plug-in like this for quite some time and was hoping maybe you would have some experience
    with something like this. Please let me know if you run into anything.
    I truly enjoy reading your blog and I look forward to your new updates.

    My webpage: erec power

  51. Замена российских, беларусских, украинских прав на польские. После обмена водительского удостоверения на Польские они заносятся в базу ЕС и вы без проблем сможете их обменять на водительское удостоверение любой страны ЕС, либо можете обменивать права в Польше по истечении срока действия(условия обмена польских прав с заканчивающимся сроком действия на польские это медкомиссия и заявление на обмен) срок месяц.

  52. Together with every little thing that appears to be building inside this particular subject matter, all your perspectives are fairly refreshing. Nevertheless, I beg your pardon, because I can not subscribe to your whole idea, all be it stimulating none the less. It looks to us that your commentary are not totally validated and in reality you are generally yourself not even completely convinced of your point. In any event I did enjoy reading it.

Lascia un commento

Il tuo indirizzo email non sarà pubblicato. I campi obbligatori sono contrassegnati *