Weekly Roundup: Log4j Scare Resurfaces, Iranian Hacker Sanctions, and Other Security News

A recent industry roundup has flagged several cybersecurity developments that businesses may have missed, including renewed concerns over Log4j, a widely used logging library that was at the centre of a major remote code execution (RCE) vulnerability in 2021. The story also touches on the shutdown of security firm Minimus and new U.S. sanctions against Iranian hackers, underscoring the ongoing global effort to disrupt cybercriminal operations.

Other stories in the digest include a cyberattack affecting Manchester Airports Group, revelations that some data from the Carhartt breach was reportedly fabricated, and U.S. Bank's response to claims made by a ransomware gang. These incidents highlight how varied and persistent cyber threats remain across industries, from critical infrastructure to retail and financial services.

While details on each story remain limited, the recurring theme is clear: vulnerabilities in widely used software like Log4j can resurface as ongoing risks if not properly patched, and threat actors continue to target organisations of all sizes through breaches, ransomware, and data leaks. For small and medium businesses, staying informed about these broader trends helps ensure that patching and vendor risk management remain a priority, even when the immediate headlines don't seem to affect them directly.