Minecraft<\/strong><\/a> and a number of other enterprise products.<\/p>\nThe Log4j vulnerability<\/strong> , first reported on Friday- is turning out to be a cybersecurity nightmare<\/strong> that likely impacts a wide range of products from Apple\u2019s iCloud to Twitter to Microsoft\u2019s Minecraft to Amazon and a number of other enterprise products.<\/p>\nThe Log4j<\/strong><\/span> software flaw as reported by cybersecurity<\/strong> researchers could allow attackers to have uncontrolled access to computer systems, and even the US government\u2019s cybersecurity agency has issued a warning on the same.<\/p>\n\u00a0<\/p>\n
Security Vulnerability in Minecraft<\/h2>\n applies to Minecraft: Java Edition.<\/p>\nminecraft vulnerability<\/figcaption><\/figure>\nWe have identified a vulnerability in the form of an exploit within Log4j \u2013 a common Java logging library. This exploit affects many services \u2013 including Minecraft<\/strong>: Java Edition.What you need to do:<\/p>\n
Official Game Client<\/p>\n
If you play Minecraft: Java Edition, but aren\u2019t hosting your own server, you will need to take the following steps: Close all running instances of the game and the Minecraft Launcher. Start the Launcher again \u2013 the patched version will download automatically.<\/p>\n
Modified Clients and Third-party Launchers<\/p>\n
Modified clients and third-party launchers might not be automatically updated. In these cases, we recommend following the advice of your third-party provider. If the third-party provider has not patched the vulnerability, or has not stated it is safe to play, you should assume the
If you\u2019re hosting your own Minecraft<\/strong>: Java Edition server, you’ll need to take different steps<\/p>\ndepending on which version you\u2019re using, in order to secure it.<\/p>\n
\u00a0<\/p>\n
Critical Apache Log4j2 Exploit Demonstrated in Minecraft<\/h3>\n We explore a far-reaching, real-world exploit with damaging implications in this edition of SecurityWatch.<\/p>\n
\nLast weekend was a bad time to be a server administrator. A critical vulnerability emerged in Apache Log4j2.<\/p>\n<\/blockquote>\n
The big problem? Attackers have the chance to exploit the open-source Java package that all kinds of applications, from Twitter to iCloud, use to execute any code an attacker chooses.<\/p>\n
What the Apache Log4j2 Exploit Means for You and Me<\/h5>\n I spoke with cybersecurity researcher John Hammond from Huntress Labs about the exploit and the subsequent scramble to mitigate the damage.<\/p>\n
Hammond recreated the exploit on a Minecraft<\/strong> server for his YouTube channel, and the results were explosive.<\/p>\n\u00a0<\/p>\n\n\n\nhttps:\/\/twitter.com\/_JohnHammond\/status\/1469255402290401285\n<\/div><\/figure>\n\n\n
Log4j security flaw puts the entire internet at risk: What top tech companies are saying<\/h3>\n The vulnerability was announced suddenly, as a \u201czero-day\u201d vulnerability, taking the industry by surprise. Here’s how tech companies are responding to the security flaw that is potentially capable of putting the entire internet at risk.<\/p>\n
Services of major tech companies are currently facing what experts are calling one of the most serious software flaws in recent times\u2014Log4j vulnerability. The flaw in the Log4j software could allow hackers unfettered access to computer systems and has prompted an urgent warning by the US government\u2019s cybersecurity agency.<\/p>\n
The new vulnerability affects the widely used library Log4j which was created by Apache, the most widely used web server. The Log4j vulnerability allows remote code execution by simply typing a specific string into a textbox. It was first discovered by Minecraft players but soon it was realised that this vulnerability wasn\u2019t just a Minecraft exploit, but works on every program using the Log4j library.<\/p>\n
To understand how Log4j functions, check out our recent article where we dig more about the exploit and its workings. It should be noted that this bug doesn\u2019t affect all versions of Log4j , and only affects the versions between 2.0 and 2.14.1.<\/p>\n
Interestingly, the Log4j exploit is one of the worst vulnerabilities we have had in the last 10 years. Here\u2019s how tech companies are responding to the security flaw that is potentially capable of putting the entire internet at risk.<\/p>\n
Microsoft<\/strong> said Saturday that Log4j vulnerability, will not only affect machines that mine cryptocurrencies but can cause more serious problems such as credential and data theft.<\/p>\nGoogle Cloud<\/strong> in its security advisory notes that it is actively following the security vulnerability. \u201cWe are currently assessing the potential impact of the vulnerability for Google Cloud products and services. This is an ongoing event and we will continue to provide updates through our customer communications channels.\u201d<\/p>\nVMWare<\/strong> Inc, which makes computer virtualisation software, said Thursday that several of its products were likely affected by the Java-based Log4j. The cloud computing company listed all of its products and versions that are affected by the vulnerability.<\/p>\nCisco<\/strong> Talos observed attacker activity beginning December 2. The company notes that additional vectors could be used to trigger the vulnerability.<\/p>\nAmazon<\/strong><\/a> Web Services (AWS) said that it is aware of the recently disclosed security issue relating to the open-source Apache \u201cLog4j2\u2033 utility. \u201cWe are actively monitoring this issue, and are working on addressing it for any AWS services which either use Log4j2 or provide it to customers as part of their service,\u201d an advisory pushed by Amazon read.<\/p>\n<\/p>\n\n\n
Apache Log4j Security Vulnerabilities: What we need to do?<\/h2>\n\n\n\nWhat is Log4j security issue?<\/h6>\n\n\n\n
![\"minecraft](\"https:\/\/www.virlan.co\/trends\/wp-content\/uploads\/2021\/12\/minecraft-vulnerability.jpg\")