Risky Business #649 -- Java being a fiddly mess saves the day

<p>On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:</p> <ul> <li>The log4j bug wrap</li> <li>The ransomware wrap</li> <li>The human rights and surveillance industry wrap</li> <li>Research and carnage wrap</li> </ul> <p>This week’s show is brought to you by Airlock Digital. They make allowlisting software that has mostly been used in Windows environments, but as you’re about to hear they’ve now got a very, very nice solution for the bigger Linux distros, and their Mac agent is going to be launched in a few weeks.</p> <p>Links to everything that we discussed are below and you can follow <a href="https://twitter.com/riskybusiness">Patrick</a> or <a href="https://twitter.com/metlstorm">Adam</a> on Twitter if that’s your thing.</p> <div class="panel panel-default"> <div class="panel-heading"> <h3 class="panel-title">Show notes</h3> </div> <div class="panel-body"> <ul> <li><a href="https://www.ftc.gov/news-events/blogs/techftc/2022/01/ftc-warns-companies-remediate-log4j-security-vulnerability?utm_campaign=ftc_warns_companies_to_re&utm_content=1641325381&utm_medium=social&utm_source=linkedin,twitter">FTC warns companies to remediate Log4j security vulnerability | Federal Trade Commission</a></li> <li><a href="https://srslyriskybiz.substack.com/p/srsly-risky-biz-thursday-december-9b2">Srsly Risky Biz: Thursday December 16</a></li> <li><a href="https://www.technologyreview.com/2021/12/17/1042692/log4j-internet-open-source-hacking/">The internet runs on free open-source software. Who pays to fix it? | MIT Technology Review</a></li> <li><a href="https://portswigger.net/daily-swig/propane-distributor-superior-plus-admits-ransomware-breach">Propane distribu