https://untrustednetwork.net/en/tag/tf-csirt/ Recent content in TF-CSIRT on Untrusted Network Hugo -- gohugo.io en &copy; Jan Kopriva 2015 - {year} Mon, 14 Mar 2022 09:00:00 +0100 weekly weekly https://untrustednetwork.net/en/2022/03/14/log4shell-lightning-talk/ Mon, 14 Mar 2022 09:00:00 +0100 Mon, 14 Mar 2022 09:00:00 +0100 https://untrustednetwork.net/en/2022/03/14/log4shell-lightning-talk/ Few weeks ago, I attended the 2022 TF-CSIRT Meeting &amp; FIRST Regional Symposium Europe and gave a lighting talk there discussing couple of interesting trends seen in Log4shell exploitation attempts and the possibility to create a simple generic defense agains similar attacks in the future. Recordings of all the talks are now available on YouTube and you may find my lightning talk in the video under this paragraph or on this link. <p>Few weeks ago, I attended the <a href="https://www.first.org/events/symposium/regional_europe2022/">2022 TF-CSIRT Meeting &amp; FIRST Regional Symposium Europe</a> and gave a lighting talk there discussing couple of interesting trends seen in Log4shell exploitation attempts and the possibility to create a simple generic defense agains similar attacks in the future. Recordings of all the talks are now available on <a href="https://www.youtube.com/watch?v=DWYJ3gBqQAk&amp;list=PLBAUUhONOrO8eOqT32j7cNuQiwhRG9FyF&amp;index=1">YouTube</a> and you may find my lightning talk in the video under this paragraph or on <a href="https://www.youtube.com/watch?v=iG1ld1SNnsY&amp;list=PLBAUUhONOrO8eOqT32j7cNuQiwhRG9FyF&amp;index=10&amp;t=1251s">this link</a>. Lightning talks were supposed to be only 5 minutes long and I went significantly over the allocated time, but I hope that most attendees didn&rsquo;t mind it too much&hellip;</p> <p align="center"><iframe width="560" height="315" src="https://www.youtube.com/embed/iG1ld1SNnsY?start=1251" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></p> Jan Kopriva featured image FIRST TF-CSIRT Log4shell Vulnerability Exploit Talks 2022