---
id: 890
title: "Living with and Learning from Log4Shell"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/living-with-and-learning-from-log4shell/"
published_at: "2021-12-16 00:00"
tags: ["supply-chain", "incident-response", "waf", "log4j", "soc", "supply-chain-security", "log4shell", "hardening"]
phying_url: "https://phying.com/item/890"
lang: en
---

# Living with and Learning from Log4Shell

## Summary

Bugcrowd CIO Nick McKenzie advises SOC teams to stay in red-alert mode for weeks after Log4Shell, use software composition analysis and trusted images, and watch for third-party supply chain attacks.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2021-12-16 00:00
- **Original:** https://www.bugcrowd.com/blog/living-with-and-learning-from-log4shell/
- **Phying News:** https://phying.com/item/890