Episode 232: Log4j Won’t Go Away (And What To Do About It.)

This podcast transcript explains the critical Log4j (Log4Shell) remote code execution vulnerability affecting the Log4j Java logging library, its pervasive presence across thousands of software packages and major services (including Minecraft, iCloud, Twitter), evidence of active scanning and exploitation by threat actors, and the resulting large-scale remediation challenge; it emphasizes mitigation steps (patches, disabling unsafe features, WAF rules) and the need for software bills of materials (SBOMs) to manage supply-chain risk.