log4j

The following article was written by Paul Ducklin and provided by the Sophos Naked Security blog.