CNET: Log4j software bug could cause ‘incalculable’ damage: What you need to know

CNET: Log4j software bug could cause ‘incalculable’ damage: What you need to know . “The flaw is potentially disastrous because of the widespread use of the Log4j logging library in all kinds of enterprise and open-source software, said Jon Clay, vice president of threat intelligence at Trend Micro. The logging library is popular, in part, because it’s free to use. That price tag comes with a trade-off: Just a handful of people maintain it. Paid products, by contrast, usually have large software development and security teams behind them.”