Identity-based segmentation neutralizes Apache Log4j exploit

Zscaler ThreatLabz observed exploit attempts against the critical Log4j RCE (CVE-2021-44228) and recommends preventing and containing attacks using identity-based workload microsegmentation. The report explains how software identity (down to subprocess/JAR level) and least-privilege policies block inbound/outbound malicious communications, stop lateral movement and exfiltration, and aid inventorying vulnerable Log4j instances via fingerprint hashes and threat feeds.