Log4j RCE: Emergency patch issued to plug critical auth-free code execution hole in widely used logging utility

Prepare to have a very busy weekend of mitigating and patching
Updated An unauthenticated remote code execution vulnerability in Apache's Log4j Java-based logging tool is being actively exploited, researchers have warned after it was used to execute code on Minecraft servers.…