CISA releases Apache Log4j scanner to find vulnerable apps

The tool enables security teams to scan network hosts for Log4j RCE exposure and spot WAF bypasses that can allow threat actors to gain code execution within the organization's environment.