Impact

This complex vulnerability is in a library used across many different products and could affect many laptop and desktop computers.

Action Needed

As systems are patched, you may be asked to apply software and hardware updates, and a restart may be required. When prompted, please install any updates as soon as possible. 

Details

Log4j is a popular open-source logging utility used by millions of Java applications. On 12/9/2021, a zero-day vulnerability was discovered in Log4j that allows hackers to compromise and leverage vulnerable systems for bitcoin mining and ransomware attacks.