by admin |
on Dicembre 15, 2021 |
at 2:01 pm
La minaccia di Log4Shell ora si estende a Stati e banche

Cos’è e perché è una minaccia

I ricercatori hanno scoperto una vulnerabilità in Log4j, una libreria usata dalla stragrande maggioranza programmatori di software con linguaggio Java che consente di scrivere nel software quelli che vengono chiamati ‘log’, ovvero degli ‘status’ del software stesso che permettono di fotografare un momento dello sviluppo del software stesso, registrando stati di avanzamento, perfomance, problemi e soluzioni.

Portata della vulnerabilità

Log4j è utilizzato in molte forme di software aziendale e open source, comprese piattaforme cloud, applicazioni Web e servizi di posta elettronica. Ciò significa che esiste un’ampia gamma di software che potrebbero essere a rischio dai tentativi di sfruttare la vulnerabilità.

Come spiega Agi, “Java è su circa 3 miliardi di dispositivi. E Log4j, sviluppato da Apache, è usato da quasi tutti i programmatori. Per dare un’idea del suo utilizzo e della sua affidabilità basti pensare che anche Ingenuity, l’elicottero della Nasa atterrato sul suolo di Marte lo scorso febbraio, ha un software che usa Log4j, come la stessa Apache ha reso noto sul proprio profilo Twitter”.

Le conseguenze

Questa vulnerabilità permette all’attaccante di eseguire da remoto sul sistema obiettivo vulnerabile dei comandi non autorizzati. L’attaccante ha così il pieno accesso alla macchina. Potrà sottrarre i dati, trasformarla in un vettore di attacco, e muoversi lateralmente all’interno dell’infrastruttura per attuare azioni malevoli.

Quali dispositivi sono colpiti ?

La vulnerabilità Log4Shell (LogJam) può colpire tutti quei dispositivi che usano Java o software che usano il linguaggio Java e la libreria Log4j.

In pratica, miliardi di dispositivi nel mondo usano software che contengono librerie Java e questa libreria nello specifico. Questo significa che non in tutti i casi l’utente finale può sapere quali software che utilizza sono al momento potenzialmente vulnerabili.

Quel che è chiaro, è che le imprese sono quelle più esposte e vulnerabili. Imprese di ogni dimensione, dalle grandi alle piccole, potrebbero essere prese direttamente o indirettamente di mira. Basta infatti utilizzare un software che fa uso della libreria Apache Log4j per cadere potenzialmente vittima di un attacco generalizzato al software in questione.

Come difendersi

Oracle, la società che distribuisce la tecnologia software Java, ha già rilasciato degli aggiornamenti del suo software.

Quindi, è molto importante che chi ha Java installato sul computer di casa, o altri dispositivi, effettui l’aggiornamento all’ultima versione disponibile. Sul sito web https://www.java.com/it/ è possibile scaricare l’aggiornamento, in alternativa basta aprire il software Java, già installato sul computer (o notebook), ed effettuare una ricerca degli aggiornamenti.

La Apache Foundation ha di suo aggiornato la libreria Log4j più volte negli ultimi giorni, l’ultima versione disponibile è la 2.16.0 del 13 dicembre. La Fondazione sta chiedendo agli sviluppatori di software che hanno implementato la libreria nei propri software di aggiornare all’ultima versione.

Per proteggere i propri server viene inoltre consigliato di utilizzare un software di sicurezza informatica. Nel caso in cui già si utilizzino software di protezione, è importante aggiornarli all’ultima versione resa disponibile.

Gli utenti privati possono cogliere questa occasione per effettuare un aggiornamento completo di tutti i software installati sul proprio computer di casa o di lavoro, o di ufficio, con l’obiettivo di proteggersi da questi e altri attacchi.

Categories:

Virus

Tags:

cyber-securityLog4jvirus

309 Responses

  1. Meilleure application de contrôle parental pour protéger vos enfants – Moniteur secrètement secret GPS, SMS, appels, WhatsApp, Facebook, localisation. Vous pouvez surveiller à distance les activités du téléphone mobile après le téléchargement et installer l’apk sur le téléphone cible.

    Rispondi

  141. I like what you guys are up too. Such smart work and reporting! Carry on the excellent works guys I have incorporated you guys to my blogroll. I think it will improve the value of my web site :).

    Rispondi

  143. Thanks for sharing excellent informations. Your web-site is so cool. I am impressed by the details that you¦ve on this web site. It reveals how nicely you understand this subject. Bookmarked this web page, will come back for extra articles. You, my pal, ROCK! I found simply the information I already searched all over the place and just could not come across. What an ideal site.

    Rispondi

  144. You can definitely see your skills within the paintings you write. The arena hopes for more passionate writers like you who aren’t afraid to mention how they believe. All the time go after your heart.

    Rispondi

  145. I¦ve been exploring for a little bit for any high quality articles or weblog posts in this sort of space . Exploring in Yahoo I finally stumbled upon this site. Studying this info So i¦m glad to exhibit that I have an incredibly just right uncanny feeling I discovered exactly what I needed. I so much certainly will make certain to do not put out of your mind this site and provides it a glance regularly.

    Rispondi

  162. I am really loving the theme/design of your website. Do you ever run into any internet browser
    compatibility problems? A small number of my blog audience have complained about my site
    not operating correctly in Explorer but looks great in Safari.
    Do you have any recommendations to help fix this issue?

    My web site testoprime review

    Rispondi

  168. I was very happy to find this net-site.I wished to thanks for your time for this excellent read!! I positively having fun with each little bit of it and I’ve you bookmarked to take a look at new stuff you weblog post.

    Rispondi

  181. Everything posted made a great deal of sense. However, what about this?
    what if you were to create a awesome title? I ain’t
    saying your information is not solid, but what if you added a title to maybe grab folk’s attention? I mean Log4j, ecco la nuova minaccia informatica per tutto il mondo – FefeWeb is kinda vanilla.

    You ought to look at Yahoo’s home page and see how they
    create post headlines to grab people to click. You might
    add a video or a related picture or two to get people excited about what you’ve got
    to say. Just my opinion, it might bring your posts a little bit more interesting.

    My blog: dentavim ingredients list

    Rispondi

  182. Magnificent goods from you, man. I’ve understand your stuff
    previous to and you are simply too magnificent.
    I actually like what you have obtained right here, certainly like
    what you’re saying and the way in which through which you say it.
    You are making it enjoyable and you still care
    for to stay it wise. I can’t wait to read much more from you.
    That is really a wonderful web site.

    Feel free to surf to my site :: is lottery defeater software legit

    Rispondi

  189. hello there and thank you to your information – I’ve definitely picked up anything new from right here. I did however expertise several technical issues the usage of this website, as I experienced to reload the web site lots of times previous to I may just get it to load correctly. I were thinking about if your hosting is OK? No longer that I’m complaining, however sluggish loading cases occasions will very frequently have an effect on your placement in google and can injury your quality rating if advertising and ***********|advertising|advertising|advertising and *********** with Adwords. Anyway I am adding this RSS to my email and could glance out for a lot more of your respective intriguing content. Make sure you replace this again soon..

    Rispondi

  194. Just want to say your article is as surprising.
    The clarity in your post is simply nice and i can assume you are an expert on this subject.
    Fine with your permission allow me to grab your RSS feed to keep up to date with forthcoming
    post. Thanks a million and please carry on the rewarding
    work.

    Here is my web-site … nerve pro 6

    Rispondi

  198. I’m truly enjoying the design and layout of your site.
    It’s a very easy on the eyes which makes it much more pleasant
    for me to come here and visit more often. Did you hire
    out a developer to create your theme? Outstanding work!

    Also visit my web blog … ULTRA K9 PRO

    Rispondi

  202. Hello there! This article could not be written any better!
    Looking through this article reminds me of my previous roommate!
    He always kept talking about this. I most certainly will forward this article to him.
    Fairly certain he’s going to have a very good read.

    Thanks for sharing!

    Feel free to surf to my webpage … nerve fresh

    Rispondi

  204. You are so interesting! I don’t believe I have read something like
    that before. So great to find another person with original
    thoughts on this subject matter. Really.. many thanks for
    starting this up. This site is one thing that is required on the internet,
    someone with a little originality!

    Also visit my web site vigrx plus directions

    Rispondi

  206. Its like you read my mind! You appear to know so much about this, like you wrote the book in it or something.
    I think that you can do with a few pics to drive the message home a bit, but other than that, this is great blog.
    A fantastic read. I will definitely be back.

    Feel free to surf to my website … vigrx plus

    Rispondi

  209. This design is spectacular! You most certainly know how to keep
    a reader entertained. Between your wit and your videos, I was almost moved to start
    my own blog (well, almost…HaHa!) Excellent
    job. I really loved what you had to say, and more than that, how you presented it.
    Too cool!

    Here is my web-site the matrix growth

    Rispondi

  214. Can I just say what a relief to find someone who actually knows what theyre talking about on the internet. You definitely know how to bring an issue to light and make it important. More people need to read this and understand this side of the story. I cant believe youre not more popular because you definitely have the gift.

    Rispondi

  215. I simply had to thank you so much yet again. I do not know the things that I would’ve achieved without the entire ways revealed by you over my question. This was a real troublesome matter in my position, nevertheless viewing this specialised approach you processed that made me to weep for gladness. I’m just thankful for this assistance and even sincerely hope you realize what an amazing job you’re doing instructing men and women with the aid of your blog post. More than likely you’ve never encountered all of us.

    Rispondi

  216. Pretty nice post. I just stumbled upon your weblog and wanted to mention that I’ve truly
    enjoyed browsing your blog posts. After all I will be subscribing in your rss feed and I am hoping you write once more very soon!

    Feel free to visit my site :: fitspresso

    Rispondi

  221. Hello would you mind letting me know which web host you’re working with?
    I’ve loaded your blog in 3 completely different internet browsers and I must
    say this blog loads a lot quicker then most. Can you suggest a good web hosting provider at a
    honest price? Thanks, I appreciate it!

    My webpage – prodentim reviews

    Rispondi

  222. hey there and thank you for your information – I’ve certainly picked up something new from right here.
    I did however expertise several technical issues using
    this web site, since I experienced to reload the web site
    a lot of times previous to I could get it to load
    properly. I had been wondering if your web host is
    OK? Not that I am complaining, but sluggish loading instances times will very frequently affect your placement in google and can damage
    your quality score if ads and marketing with Adwords.
    Anyway I’m adding this RSS to my email and can look out for much more of your
    respective fascinating content. Make sure you update this again soon.

    My blog – the billionaire brain wave reviews

    Rispondi

  224. Today, I went to the beach front with my kids.
    I found a sea shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She placed the shell to her ear and
    screamed. There was a hermit crab inside and it
    pinched her ear. She never wants to go back! LoL I know this is completely off topic but I had to tell someone!

    Also visit my page … the dick growth matrix

    Rispondi

  225. I’d have to examine with you here. Which is not one thing I usually do! I take pleasure in reading a post that may make folks think. Additionally, thanks for permitting me to comment!

    Rispondi

  229. Please let me know if you’re looking for a article writer for your weblog.
    You have some really good posts and I believe I would be a
    good asset. If you ever want to take some of the load off,
    I’d love to write some content for your blog in exchange for a
    link back to mine. Please blast me an email if interested.
    Kudos!

    my website … item651311760

    Rispondi

  246. I believe this web site has some really wonderful information for everyone. “There is nothing so disagreeable, that a patient mind cannot find some solace for it.” by Lucius Annaeus Seneca.

    Rispondi

  255. A person essentially assist to make critically posts I would state.
    That is the very first time I frequented your web page and to this
    point? I surprised with the research you made to create this particular put up extraordinary.
    Great activity!

    Look at my web blog :: money wave review

    Rispondi

  264. Today, I went to the beachfront with my children. I found a sea
    shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She put the shell to her
    ear and screamed. There was a hermit crab inside and it pinched her ear.

    She never wants to go back! LoL I know this is completely off
    topic but I had to tell someone!

    Here is my web page – tonic greens

    Rispondi

  266. An outstanding share! I’ve just forwarded this onto a friend
    who has been conducting a little research on this.

    And he actually bought me lunch simply because I stumbled upon it for him…
    lol. So let me reword this…. Thank YOU for the meal!!
    But yeah, thanks for spending the time to discuss this
    matter here on your internet site.

    Feel free to surf to my webpage … glucofreedom pills

    Rispondi

  268. Can I just say what a comfort to uncover an individual who truly knows what they’re discussing on the internet.
    You certainly know how to bring a problem to light and make it important.
    A lot more people should check this out and understand this side
    of the story. I can’t believe you are not more popular since you surely
    possess the gift.

    Feel free to visit my web page :: prodentim logo

    Rispondi

  270. Great beat ! I would like to apprentice at the same time as
    you amend your web site, how can i subscribe for a weblog
    web site? The account aided me a applicable deal.

    I were tiny bit acquainted of this your broadcast offered shiny transparent concept

    Also visit my page provadent snopes

    Rispondi

  272. I absolutely love your blog and find the majority of your post’s to be just what I’m
    looking for. Does one offer guest writers to write content
    available for you? I wouldn’t mind creating a post or elaborating on a few of the subjects you write with
    regards to here. Again, awesome web log!

    Look into my blog post … boostaro

    Rispondi

  274. It’s a pity you don’t have a donate button! I’d
    certainly donate to this fantastic blog! I guess for now i’ll settle for book-marking and
    adding your RSS feed to my Google account. I look forward to
    new updates and will talk about this blog
    with my Facebook group. Chat soon!

    Stop by my website; phenq reviews

    Rispondi

  277. I do not even know how I ended up here, but I thought this post was great.
    I do not know who you are but certainly you’re going to a
    famous blogger if you are not already 😉 Cheers!

    Have a look at my page: alphabites

    Rispondi

  280. I know this if off topic but I’m looking into starting my own blog and was curious what all is required to
    get set up? I’m assuming having a blog like yours would cost a pretty
    penny? I’m not very web smart so I’m not 100% positive.
    Any recommendations or advice would be greatly appreciated.
    Thank you

    My homepage: alpha bites supplement

    Rispondi

  281. Simply wish to say your article is as astonishing. The clearness for your
    submit is simply great and i can assume you’re a professional in this subject.
    Well with your permission let me to clutch your feed to keep updated with imminent post.

    Thanks one million and please carry on the gratifying work.

    Review my web blog :: alpha bites

    Rispondi

  285. Its like you read my mind! You appear to know a lot about this,
    like you wrote the book in it or something. I think that you can do with a
    few pics to drive the message home a bit, but other than that, this is fantastic blog.
    A great read. I will definitely be back.

    Take a look at my blog – money wave reviews

    Rispondi

  288. Heya exceptional blog! Does running a blog like
    this take a massive amount work? I’ve very little understanding of
    programming however I was hoping to start my own blog in the near future.
    Anyhow, should you have any suggestions or techniques for new blog
    owners please share. I understand this is off topic however
    I just had to ask. Many thanks!

    Also visit my page :: iq blast pro side effects

    Rispondi

  292. Virtually all of what you point out happens to be astonishingly appropriate and that makes me wonder why I had not looked at this in this light before. Your piece truly did switch the light on for me personally as far as this specific subject matter goes. However at this time there is one issue I am not necessarily too comfy with and whilst I try to reconcile that with the main theme of your point, permit me observe exactly what all the rest of your visitors have to say.Nicely done.

    Rispondi

  305. Hello, I think your blog might be having browser compatibility issues. When I look at your blog site in Firefox, it looks fine but when opening in Internet Explorer, it has some overlapping. I just wanted to give you a quick heads up! Other then that, very good blog!

    Rispondi

Lascia un commento

Il tuo indirizzo email non sarà pubblicato. I campi obbligatori sono contrassegnati *

  • Via Canneti, Montorfano, CO
  • 3465182379
  • info@fefeweb.it