The Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on Friday that they added a critical vulnerability in products that use the Log4j software library to their list of exploited vulnerabilities. The announcement was followed by a call hosted by CISA on Monday to explain the potential impact and urged immediate remediation steps to industries in the category of critical infrastructure. CISA is working with cybersecurity experts in both the public and private sector to resolve the exploit before it can be used for widespread attacks. Log4j is a common open-source logging service used by many cloud and enterprise application platforms, such as Amazon, Apple iCloud, Cisco, Microsoft, Twitter, etc.
CISA Informs Key Business Sectors of Newly Discovered Vulnerability
- Details