# Quick Fire Java: Java After Log4j

> Watch a 10 minute discussion on Log4j, security processes and prioritization, and how Payara dealt with the vulnerability.

- URL: https://foojay.io/today/quick-fire-java-java-after-log4j/
- Published: 2022-03-31
- Authors: Jadon Ortlepp
- Categories: Payara, Security, Videos
- Originally published at: https://blog.payara.fish/java-after-log4j


In this episode of the Quick Fire Java video series, Rudy De Busscher and Priya Khaira-Hanks discuss Log4j, security processes and prioritization, and how Payara dealt with the vulnerability.

All in a concise 10-minute video!

The [Log4j](https://logging.apache.org/log4j/2.x/) vulnerability, [Log4Shell](https://en.wikipedia.org/wiki/Log4Shell), was disclosed in early December 2021 and the repercussions have been far-reaching.  

[Rudy](https://twitter.com/rdebusscher) explains more about what this actually means and about the wider implications of the incident. He also responds to [BreachQuest's](https://www.breachquest.com/)[Jake Williams](https://twitter.com/MalwareJake) for [Threatpost](https://threatpost.com/), who claimed "being exploited through an internet-facing system running vulnerable log4j at this point is a leadership failure, not a technical one."

Watch the video to find out whether Rudy agrees... 🙂

{{< youtube 56D0Sy_r6-A >}}