{"id":44457,"date":"2021-12-16T18:00:00","date_gmt":"2021-12-16T18:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/vulnerabilities-threats\/log4shell-the-big-picture"},"modified":"2021-12-16T18:00:00","modified_gmt":"2021-12-16T18:00:00","slug":"log4shell-the-big-picture","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/","title":{"rendered":"Log4Shell: The Big Picture"},"content":{"rendered":"
<\/div>\n

So much for a quiet holiday season: CVE-2021-44228<\/a> (aka Log4Shell) may well be the most impactful vulnerability we’ve seen in years. Let’s look at what makes this vulnerability special, how multiple factors came together to create the perfect cybersecurity storm, and some things we should get done when the storm passes. <\/p>\n

My goal here isn’t a technical walkthrough: Others have done that very well, so I’d like to go up a level and look at why this is such a tricky vulnerability and why the industry response has been good, but not great.<\/p>\n

The Perfect Storm
<\/strong>Log4Shell has some particularly unpleasant properties, but what really stands out to me is that in many cases exploitation can be as easy as convincing a vulnerable service to log a piece of attacker-controlled data. Moreover, because the vulnerability is tied to data, it can go wherever the data goes, so the exploited system is not always Internet-facing \u2014 it can exist deep in cloud infrastructure. The second we had a fully working exploit, we realized that the blast radius of Log4Shell would be huge. <\/p>\n

This perfect storm is a result of the following factors combining into one vulnerability:<\/p>\n

    \n
  1. Log4j is a common component, and frequently no privileged access is required to exploit a vulnerable system.<\/li>\n
  2. Externally, there is no 100% reliable way to know you’re safe. You can know you’re exploitable (that’s how most of the current scanners work \u2014 launch the first stage of an exploit), but the only way to be sure you are safe is to patch all vulnerable Log4j instances everywhere. Given that this component is used in many back-end systems (such as Elastic and Logstash), that covers not just code you wrote but also packages you use.<\/li>\n
  3. The attacker only needs to be able to get the victim system to write something to a log \u2026 and there are  myriad ways this can happen. Yes, it can be as simple as tainting the “User Agent” field in a request header \u2014 but it could be as complex as tainting a form field or, worse yet, an API parameter in just the right way.<\/li>\n
  4. There can be significant lag between launching a probe and receiving a result \u2014 this lag can lead to detection failures, where a vulnerable system is incorrectly marked as “safe.”<\/li>\n<\/ol>\n

    When you add these things together, you get to where we are today: Things are rather a mess and likely to remain so for some time.\n<\/p>\n

    Friendly Fire and a False Sense of Security
    <\/strong>As if the vulnerability itself wasn’t enough, we should recognize the self-inflicted harm and the misguided sense of security that add to the context of Log4Shell.<\/p>\n

    One example of a well-intentioned but double-edged action is when third parties add rules that filter out strings that are closely associated with Log4j exploitation. On the one hand, that’s great: It makes life harder for attackers. On the other, it makes the results of external scanning less reliable, and a defender may be unaware of how their site is being filtered or how good that filtering actually is. <\/p>\n

    For example, Praetorian’s researchers built a scanner over the weekend that allows us to crawl customers sites, hunting for this vulnerability. Alas, various filters in front of the target means that we know there are requests that didn’t make it through, blunting our ability to reliably probe for all instances. While we’re pretty adept at manually bypassing rules like this, right now we simply don’t have time for that kind of bespoke work \u2026 and so defenses in place have become an impediment to discovery. The upshot \u2014 especially if you’re using a home-brew scanner \u2014 is that you may think you’re fine, but you’re not. You have to make sure the unaltered payload is actually landing on your machine. <\/p>\n

    A second problem comes from scanners in the market today that are of questionable quality. Such scanners may detect a few vulnerable instances, but their coverage is limited. A scan with such a scanner may produce a clean bill of health and false sense of security, when in reality, your attack surface is still exploitable.<\/p>\n

    Because of that, it’s really important for vendors to be upfront about the limitations of their tooling. While Praetorian’s scanner incorporated every trick in the book to have the highest possible detection rate, we are clear with customers that if we don’t see the vulnerability, it doesn’t mean that it’s not there; it may just mean it’s harder to find. External scanning has its limitations, and the only way to be sure is to go through your source code \u2014 and all the components you use \u2014 and root out vulnerable versions. My gut tells me we’ll be seeing this vulnerability in custom security assessments for months or years to come. Why? Because I think we, as an industry, haven’t always been as clear about our limitations as we could or perhaps should have been. <\/p>\n

    What Next?
    <\/strong>The next few weeks will be spent digging out, but while you work on that, keep in mind that Log4Shell won’t be the last vulnerability we’ll ever deal with at this scale. As a community, we should be thinking about how to improve interoperability and response industrywide. There’s a significant need for clearer communication, and some kind of coordination across defenders. Although the aftermath of Log4Shell will linger, we will get through it. However, shame on us if we don’t start preparing for the next event today. <\/p>\n

    That means knowing where your assets are, knowing what they’re running, and knowing what they talk to. No small task, but that storm is coming \u2014 be ready!<\/p>\n

    Read More HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    A look at why this is such a tricky vulnerability and why the industry response has been good, but not great.Read More HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-44457","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"\nLog4Shell: The Big Picture 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Log4Shell: The Big Picture 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-16T18:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte0f9169d7cc2f4fa\/61ba23f74b727d376d0c480a\/Alert_Skorzewiak_Alamy.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Log4Shell: The Big Picture\",\"datePublished\":\"2021-12-16T18:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/\"},\"wordCount\":978,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte0f9169d7cc2f4fa\\\/61ba23f74b727d376d0c480a\\\/Alert_Skorzewiak_Alamy.jpg\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/\",\"name\":\"Log4Shell: The Big Picture 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte0f9169d7cc2f4fa\\\/61ba23f74b727d376d0c480a\\\/Alert_Skorzewiak_Alamy.jpg\",\"datePublished\":\"2021-12-16T18:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte0f9169d7cc2f4fa\\\/61ba23f74b727d376d0c480a\\\/Alert_Skorzewiak_Alamy.jpg\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/blte0f9169d7cc2f4fa\\\/61ba23f74b727d376d0c480a\\\/Alert_Skorzewiak_Alamy.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/log4shell-the-big-picture\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Log4Shell: The Big Picture\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Log4Shell: The Big Picture 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/","og_locale":"en_US","og_type":"article","og_title":"Log4Shell: The Big Picture 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-12-16T18:00:00+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte0f9169d7cc2f4fa\/61ba23f74b727d376d0c480a\/Alert_Skorzewiak_Alamy.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Log4Shell: The Big Picture","datePublished":"2021-12-16T18:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/"},"wordCount":978,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte0f9169d7cc2f4fa\/61ba23f74b727d376d0c480a\/Alert_Skorzewiak_Alamy.jpg","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/","url":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/","name":"Log4Shell: The Big Picture 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte0f9169d7cc2f4fa\/61ba23f74b727d376d0c480a\/Alert_Skorzewiak_Alamy.jpg","datePublished":"2021-12-16T18:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte0f9169d7cc2f4fa\/61ba23f74b727d376d0c480a\/Alert_Skorzewiak_Alamy.jpg","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/blte0f9169d7cc2f4fa\/61ba23f74b727d376d0c480a\/Alert_Skorzewiak_Alamy.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/log4shell-the-big-picture\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Log4Shell: The Big Picture"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/44457","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=44457"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/44457\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=44457"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=44457"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=44457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}