Sunday, Jun 4, 2023
English News
  • Hyderabad
  • Telangana
  • Andhra Pradesh
  • India
  • World
  • Entertainment
  • Science and Tech
  • Sport
  • Business
  • ...
    • NRI
    • View Point
    • cartoon
    • Columns
    • Reviews
    • Education Today
    • Property
    • Videos
    • Lifestyle
    • Rewind
E-Paper
  • NRI
  • View Point
  • cartoon
  • Columns
  • Reviews
  • Education Today
  • Property
  • Videos
  • Lifestyle
  • Rewind
Home | Tech | Serious Bug Puts Apple Icloud Twitter Minecraft At Hacking Threat

Serious bug puts Apple iCloud, Twitter, Minecraft at hacking threat

The 'zero-day' exploit (which is a cyber attack targeting a software vulnerability which is unknown to the software/antivirus companies) is found in the widely-used Java logging system called 'log4j2'.

By IANS
Updated On - 10:47 AM, Sat - 11 December 21
Serious bug puts Apple iCloud, Twitter, Minecraft at hacking threat
Representational Image
whatsapp facebook twitter telegram

New Delhi: Several popular services, including Apple iCloud, Amazon, Twitter, Cloudflare and Minecraft, are vulnerable to a ‘ubiquitous’ zero-day exploit, cybersecurity researchers have warned, leaving IT security teams at several companies scrambling to patch the vulnerability called ‘Log4Shell’.

The ‘zero-day’ exploit (which is a cyber attack targeting a software vulnerability which is unknown to the software/antivirus companies) is found in the widely-used Java logging system called ‘log4j2’.

If exploited, the vulnerability allows remote code execution (RCE) on vulnerable servers, giving hackers the ability to import malware that would completely compromise millions of machines.

“Many, many services are vulnerable to this exploit. Cloud services like Steam, Apple iCloud, and apps like Minecraft have already been found to be vulnerable,” said researchers from application security company LunaSec.

“Anybody using Apache Struts is likely vulnerable. We’ve seen similar vulnerabilities exploited before in breaches like the 2017 Equifax data breach,” the researchers noted in a blog post late on Friday.

Many Open Source projects like the Minecraft server, Paper, have already begun patching their usage of ‘log4j2’.

According to a TechCrunch report, companies with servers confirmed to be vulnerable to ‘Log4Shell’ attack so far include Apple, Amazon, Cloudflare, Twitter, Steam, Baidu, NetEase, Tencent and Elastic, “though there are likely hundreds if not thousands of other organisations affected”.

In a statement, Cloudflare said it has updated systems to prevent attacks, adding that it saw no evidence of exploitation.

“The Log4j vulnerability is a significant threat for exploitation due to the widespread inclusion in software frameworks, even NSA’s GHIDRA,” said Robert Joyce, the director of Cybersecurity at the US National Security Agency (NSA).

GHIDRA is a free and open source reverse engineering tool developed by the agency.

The Computer Emergency Response Team (CERT) for New Zealand, Deutsche Telekom’s CERT, and the Greynoise web monitoring service have also warned that hackers are actively looking for servers vulnerable to ‘Log4Shell’ attacks.

The Apache Software Foundation has also released an emergency security update to patch the zero-day vulnerability in ‘log4j’.

  • Follow Us :
  • Tags
  • Apple iCloud
  • Hacking
  • Minecraft
  • Twitter

Related News

  • Chiranjeevi criticizes media for misquoting his health remarks, causing unnecessary confusion

    Chiranjeevi criticizes media for misquoting his health remarks, causing unnecessary confusion

  • Twitter executive responsible for content safety resigns after Elon Musk criticism

    Twitter executive responsible for content safety resigns after Elon Musk criticism

  • AI generated image of Tesla CEO Elon Musk in sherwani goes viral

    AI generated image of Tesla CEO Elon Musk in sherwani goes viral

  • Ilayaraja celebrates 80th birthday, Stalin pays visit to music maestro

    Ilayaraja celebrates 80th birthday, Stalin pays visit to music maestro

  • Boyapati Rapo movie climax shot for 24 days

    Boyapati Rapo movie climax shot for 24 days

  • Twitter bans record over 25L accounts for policy violations in India

    Twitter bans record over 25L accounts for policy violations in India

Latest News

  • Sunny Leone enjoys blissful beach getaway in Maldives

    16 mins ago
  • Artifact to let AI rewrite headline of clickbait article

    22 mins ago
  • Central govt bans 14 drug combinations used to treat common illnesses

    30 mins ago
  • Odisha train tragedy: Accident happened due to change in electronic interlocking: Railway Minister

    1 hour ago
  • Google’s chatbot AI Bard adds precise location support for more relevant responses

    1 hour ago
  • Balasore train accident was waiting to happen, indicates CAG report

    1 hour ago
  • Heatwave sweeps Andhra Pradesh, temperatures soar to 46 degrees Celsius

    2 hours ago
  • Andhra Pradesh: YSRCP unveils Mission IT Army

    2 hours ago

company

  • Home
  • About Us
  • Contact Us

business

  • Subscribe

telangana today

  • Telangana
  • Hyderabad
  • Latest News
  • Entertainment
  • World
  • Andhra Pradesh
  • Science & Tech
  • Sport

follow us

© Copyrights 2022 TELANGANA PUBLICATIONS PVT. LTD. All rights reserved. Powered by Veegam