20211209 - CVE-2021-44228 Log4J

https://nvd.nist.gov/vuln/detail/CVE-2021-44228

Mitigation

https://cloud.google.com/blog/products/identity-security/cloud-armor-waf-rule-to-help-address-apache-log4j-vulnerability

Spring boot embedded Tomcat mitigation - see spring-boot-starter-log4j2

https://unit42.paloaltonetworks.com/apache-log4j-vulnerability-cve-2021-44228/

Verify via DockerHub, GCP container analysis, GCP Artifact Registry

DDOS

• https://cloud.google.com/blog/products/identity-security/how-google-cloud-blocked-largest-layer-7-ddos-attack-at-46-million-rps
• https://finance.yahoo.com/news/microsoft-azure-users-face-disruption-194103988.html

Articles

• 20220516 Why Google Cloud is providing security for AWS and Azure users too | Mandiant | Siemplify | https://console.cloud.google.com/apis/api/containeranalysis.googleapis.com/metrics