You're listening to the CyberWire X a series of specials where we highlight important security topics affecting

security professionals worldwide.

I'm Rick Howard, the chief security officer, chief analyst, and senior fellow at

the CyberWire.

And today's episode is titled,

What Log4 Shell has taught us.

Over the holiday break in 2021,

the entire Infosec community reacted

to an international incident response

around the newly announced Log 4J Zero Day exploit.

And if 2021 taught us anything, it's that our supply chain, especially our technical supply chain, hangs in the balance on a very fragile system.

In this episode, my colleague David Bittner and I invited two guests to the CyberWire Hashtable, Tom Quinn, the CSO at T- Row Price, and Ted Driggs,

the Director of Product Management at Extra Hop, to discuss what the Log 4J Vulnerability tells us about the state of cyber defense going into

2022 and what enterprises can do to prepare.

A program note, each CyberWire X special features two segments.

In the first part of the show, we will hear from industry experts on the topic at hand.

And in the second part, we will hear from our show's sponsor for their point of view.

And since I brought it up, here's a word from today's sponsor, Extra Hop.

With millions of dollars to earn, today's cyber attackers have grown, shall we say, advanced.

Whether they're hiding malicious activity in encrypted channels, laying low under the guise of a trusted third party,

or taking advantage of the latest CBE.

They know they have the upper hand.

...