Log4Shell: Attack Evolution

HackerOne’s report summarizes the global response to the critical Log4Shell (Log4j) vulnerability: over 2,000 reports to 400+ customers, $607,000 in bounties, and confirmation that the flaw frequently retained a CVSS 10.0 rating. The write-up describes rapid attacker adaptation (90% of payloads evolved to evade blocks by Dec 20), active exploitation across environments including third-party providers, and recommends continuous asset management, layered defenses, and leveraging bug bounty incentives to improve remediation confidence.