bishopfox-logo-grey
Get Started
Log4j Vulnerability: A Fireside Chat

Log4j Vulnerability: A Fireside Chat

Join our panelists as they dive into the attacker’s perspective and how you can identify unusual activity and harden systems against further compromise.

A serious code-execution vulnerability in Log4j (an open source logging utility used in a wide variety of applications) was discovered, which could potentially pose significant impact to organizations globally.

Watch our on-demand webcast to learn more about the implications of the Log4j vulnerability. Our panel  of experts provides an overview of the CVE-2021-44228 vulnerability and what they are seeing so far.

Dan Petro Headshot

About the speaker, Dan Petro

Principal Security Engineer

As a Principal Security Engineer for the Bishop Fox Capability Development team, Dan builds hacker tools, focusing on attack surface discovery. Dan has extensive experience with application penetration testing (static and dynamic), product security reviews, network penetration testing (external and internal), and cryptographic analysis. He has presented at several Black Hats and DEF CONs on topics such as hacking smart safes, hijacking Google Chromecasts, and weaponizing AI. Dan holds both a Bachelor of Science and a Master of Science in Computer Science from Arizona State University.

More by Dan Petro
Ori Zigindere

About the speaker, Ori Zigindere

Staff Technical Product Manager

Ori Zigindere is an offensive security professional with a background in software engineering. He currently serves as a Staff Technical Product Manager at Bishop Fox, where he leads platform design and innovation for the Cosmos Attack Surface Management platform.

Ori works with organizations across a wide range of industries to strengthen their security posture against evolving threats. He has deep expertise in Attack Surface Management (ASM), Vulnerability Management, and Continuous Threat Exposure Management (CTEM), and is passionate about helping organizations reduce risk by identifying and remediating exposed, vulnerable systems.

More by Ori Zigindere
Tom Eston

About the speaker, Tom Eston

AVP of Consulting at Bishop Fox

Tom Eston is the former AVP of Consulting at Bishop Fox. Tom's work over his 15 years in cybersecurity has focused on application, network, and red team penetration testing as well as security and privacy advocacy. He has led multiple projects in the cybersecurity community, improved industry standard testing methodologies and is an experienced manager and leader. He is also the founder and co-host of the podcast The Shared Security Show; and a frequent speaker at user groups and international cybersecurity conferences including Black Hat, DEF CON, DerbyCon, SANS, InfoSec World, OWASP AppSec, and ShmooCon.
More by Tom Eston
Justin R

About the speaker, Justin Rhinehart

Senior Analyst

Justin Rhinehart is a Senior Analyst at Bishop Fox on the Bishop Fox Cosmos, formerly known as CAST, team.

More by Justin Rhinehart

Extend Your Knowledge

Check out these related resources.

Virtual Sessions

Fireside Chat: What We Learned from the SolarWinds Attack (and Beyond)

Fireside Chat: What We Learned from the SolarWinds Attack (and Beyond)

On-demand webcast features security experts discussing recent attacks at SolarWinds, Colonial Pipeline, and more.

Watch Session
Advisories Blog

Log4j Vulnerability: Impact Analysis

Log4j Vulnerability: Impact Analysis
Affecting enterprise software, web applications, and well-known consumer products globally, the CVE-2021-44228 zero-day vulnerability impacts any organization using the Apache Log4j framework. Read our official Bishop Fox response as we unfold and report on Log4j's impact.
Read Post
Datasheets

Attack Surface Discovery Datasheet

Attack Surface Discovery Datasheet

Internet-facing exposure is attackers’ number one way in, and most security teams cannot see all of theirs. Bishop Fox Attack Surface Discovery continuously finds, validates, and attributes your perimeter assets so you work from an inventory you can trust.

Download Datasheet