Log4j Becomes The Highest Detected Vulnerability Days After Release

WatchGuard Threat Lab analyzed anonymized Firebox telemetry and observed widespread scanning and exploitation attempts targeting Log4j (CVE-2021-44228 and a smaller number for CVE-2021-45105), totaling 37,463 detections with 12.6% of reporting devices seeing attempts; detections were concentrated in EMEA (notably Germany), AMER (notably the US), and APAC, and nearly all exploitation attempts occurred over encrypted connections, emphasizing the importance of TLS inspection, patching, network segmentation, and backups.