Ongoing vulnerable Log4j downloads suggest the supply chain crisis wasn't the wake-up call it should have been.
Sonatype has claimed that 13% of Log4j versions downloaded this year were vulnerable to the legacy critical Log4Shell bug ...
CISA has ordered U.S. federal agencies to patch a critical GeoServer vulnerability now actively exploited in XML External ...