Originally Posted @ December 12th & Last Updated @ December 19th, 3:37pm PST Also read: Our analysis of CVE-2021-45046 (a second log4j vulnerability). A few days ago, a serious new vulnerability was identified in Apache log4j v2 and published as CVE-2021-44228. We were one of the first security companies to write about it, and we named it "Log4Shell". This guide will help you: Find trusted sources