Log4j vulnerabilities, malware strains multiply; major attack disclosed

A new Apache Log4j vulnerability and a major attack on a military body using Log4Shell have come to light as security teams work to patch.