The Log4J vulnerability has been given a CVSS Score of 10, making it the most serious of discovered flaws. VentureBeat is reporting that Log4J attacks have been attempted on 44% of corporate networks. Find out how to protect against Log4J attacks.

We recently wrote about the newly discovered vulnerability in LOG4J2 (also referred to as LOG4SHELL).  Since we wrote our blog article, the LOG4SHELL vulnerability has been covered by major news outlets and is poised to pass both the Struts and Heartbleed vulnerabilities in terms of security and financial impact on organizations. 

While Interactive Application Security Testing (IAST) is still a relatively new technology from the perspective of adoption, it has been around for over 10 years and some of the aspects and capabilities around IAST are well understood, such as improved vulnerability detection, achieved by “looking” inside the application at runtime.   But there are features your IAST should be able to give you. Check out our list here.