Log4J patch to fix serious zero-day has its own vulnerability that is already actively exploited
Apache has patched the patch---install it ASAP
Log4J flaw turns into pandemic with over 840,000 attacks initiated within 72 hours
Attacks reached over 100 per minute over the weekend
Many Java-based applications and servers vulnerable to new Log4Shell exploit
The exploit stems from a widely used Apache logging utility and potentially impacts any Apache Struts users
'Critical' RCE vulnerability found in open-source Struts framework
Exploit code has already gone public
