The log4shell blog
Practical write-ups on images, writing and everyday online tools.
Latest posts
16 Oct 2026
Auditing Mixed Java and JavaScript Stacks for Log4Shell Dependencies
Your Java service passes its dependency scan. The incident ticket closes. A week later, someone finds an older Log4j copy inside the deployed container, while the JavaScript client
28 Sep 2026
Beyond Log4Shell: Website Security Checks Worth Running
Log4Shell showed how one library can expose a site; regular external checks catch common weaknesses.