Spring4Shell Might Grab Headlines, But Log4j Exploits Swamped Enterprises, Finds Cato Threat Report

Cato Networks' Q1 2022 SASE Threat Research Report documents massive exploitation activity—notably Log4j (CVE-2021-44228) with tens of millions of attempts—highlights continued targeting of legacy Java flaws, maps common attacker techniques (network scanning, discovery, credential access, brute force, RCE), identifies dominant C2 hosting countries, and provides mitigation guidance such as patching, virtual patching, and restricting consumer apps on enterprise networks.