It’s called Log4j and it could ruin your day 

Last Friday, the United States Cybersecurity and Infrastructure Agency warned about a new hacking vulnerability, called Log4j. It’s a vulnerability in the Apache logging library, which is a ubiquitous tool in most apps and services. It works like a journal, logging activity in an app. Hackers can send a malicious string of code to the journal, and when it’s logged, it’s possible for them to take over a computer or even a server. Marco Werman interviews Charles Carmakal, senior vice president and chief technology officer at the cybersecurity firm, Mandiant, about the vulnerability and what it means for the internet.