![](https://www.udayavani.com/wp-content/uploads/2024/12/ass-415x230.png)
Global race to patch critical computer bug
PTI, Dec 11, 2021, 9:26 AM IST
![](https://www.udayavani.com/wp-content/uploads/2021/12/Computer-bug-620x387.jpg)
Boston: Security experts around the world raced Friday to patch one of the worst computer vulnerabilities discovered in years, a critical flaw in open-source code widely used across industry and government in cloud services and enterprise software. “I’d be hard-pressed to think of a company that’s not at risk,” said Joe Sullivan, chief security officer for Cloudflare, whose online infrastructure protects websites from malicious actors.
Untold millions of servers have it installed, and experts said the fallout would not be known for several days.
New Zealand’s computer emergency response team was among the first to report that the flaw in a Java-language utility for Apache servers used to log user activity was being “actively exploited in the wild” just hours after it was publicly reported Thursday and a patch released.
The vulnerability, dubbed ‘Log4Shell,’ was rated 10 on a scale of one to 10, the worst possible. Anyone with the exploit can get full access to an unpatched machine.
“The internet’s on fire right now. People are scrambling to patch and there are script kiddies and all kinds of people scrambling to exploit it,” said Adam Meyers, senior vice president of intelligence at the cybersecurity firm Crowdstrike. “In the last 12 hours, it has been fully weaponized.”
The vulnerability in the Apache Software Foundation module was discovered November 24 by the Chinese tech giant Alibaba, the foundation said.
Meyers expected computer emergency response teams to have a busy weekend trying to identify all impacted machines. The hunt is complicated by the fact that affected software can be in programs provided by third parties. The flaw’s exploitation was apparently first discovered in Minecraft, an online game hugely popular with kids and owned by Microsoft.
Meyers and security expert Marcus Hutchins said Minecraft users had already been using it to execute programs on the computers of other users by pasting a short message in a chatbox.
Microsoft said it had issued a software update for Minecraft users and “customers who apply the fix are protected.” Researchers reported finding evidence the vulnerability could be exploited in servers run by companies including Apple, Amazon, Twitter, and Cloudflare.
Cloudflare’s Sullivan said there we no indication his company’s servers had been compromised. Apple, Amazon, and Twitter did not immediately respond to requests for comment.
Udayavani is now on Telegram. Click here to join our channel and stay updated with the latest news.
Top News
![](https://www.udayavani.com/wp-content/uploads/2023/05/IndianClicks_GVega_Udayavani_300x250_12032021_1_1.gif)
Related Articles More
![](https://www.udayavani.com/wp-content/uploads/2024/12/Ai-facial-recognition-istock1-150x84.jpg)
Snatcher lands in police net in Delhi, AI tech helps reveal identity
![](https://www.udayavani.com/wp-content/uploads/2024/12/AI-wearables-150x81.jpg)
AI Meets Health: The Rise of Smart Fitness Solutions
![](https://www.udayavani.com/wp-content/uploads/2024/12/Energy-Pexels--150x100.png)
Power Up by Powering Down: 10 Energy-Saving Tips for Every Home
![](https://www.udayavani.com/wp-content/uploads/2024/12/AI-iStock-150x110.jpg)
Multi-lingual AI chatbot to assist visitors during Maha Kumbh Mela 2025
![](https://www.udayavani.com/wp-content/uploads/2024/12/isro-41-150x84.jpg)
ISRO carries out ‘well deck’ recovery trial of Gaganyaan
MUST WATCH
Latest Additions
![](https://www.udayavani.com/wp-content/uploads/2024/12/ass-150x83.png)
Assembly clears Mysuru Development Authority Bill
![](https://www.udayavani.com/wp-content/uploads/2024/12/ott-150x100.png)
Blocked 18 OTT platforms for publishing obscene, vulgar content: Govt
![](https://www.udayavani.com/wp-content/uploads/2024/12/branch-150x84.png)
Boy critically injured after tree branch falls on him in Bengaluru
![](https://www.udayavani.com/wp-content/uploads/2024/12/teargas-150x83.png)
Congress claims party worker ‘died due to tear gas smoke’ during protest in Assam
![](https://www.udayavani.com/wp-content/uploads/2024/12/accdt-3-150x98.jpg)
Four dead in road accident in Kolar
Thanks for visiting Udayavani
You seem to have an Ad Blocker on.
To continue reading, please turn it off or whitelist Udayavani.