Managing Log4j risks takes time, vigilance. DPRK phishing. Iran calls for retribution. A low-grade software supply chain risk?

Dateline the Internet: the Log4j vulnerabilities and related risks.

Log4j vulnerabilities and the long slog through remediation and risk management. (The CyberWire) Log4j vulnerabilities are going to be with us for some time. They’re undergoing active exploitation, and fixing them will require…