Page 5 - Apache Foundation News Today

As all industries continue to struggle with Log4j remediation, HHS HC3 is urging the healthcare sector to assume systems have been compromised and to review new vulnerability guidance.

Participants in a White House meeting on securing open-source software expressed optimism for working effectively with government to help prevent Log4j-like events.

Across all sectors and the federal government, finding and rooting out Log4j vulnerability instances has proved a considerable challenge. But with patient safety at stake, and where legacy devices and applications abound, the healthcare sector is struggling.

China and Russia, Kinsing miner botnet dominate sources of exploit attempts.

The U.S. cybersecurity agency can't rule out that adversaries are using Log4j to gain persistent access to launch attacks later.

But that could change anytime, officials warn, urging organizations to prioritize patching against the critical remote code execution flaw.

Earlier this week, FTC announced it would use its full legal authority to pursue companies that fail to take reasonable steps to protect consumer data from exposure as a result of Log4j, or similar known vulnerabilities. Now security experts are trying to define what that means for companies' liability.

Earlier this week, FTC announced it would use its full legal authority to pursue companies that fail to take reasonable steps to protect consumer data from exposure as a result of Log4j, or similar known vulnerabilities. Now security experts are trying to define what that means for companies' liability.

Microsoft says vulnerabilities present a "real and present" danger, citing high volume of scanning and attack activity targeting the widely used Apache logging framework.

Andy Pavlo's take on 2021 database industry happenings - PostgreSQL, Performance Wars, Passings, and Larry Ellison