Log4j vulnerability: what should boards be asking?

The Log4Shell critical vulnerability in the widely used logging tool Log4j has caused concern beyond the cyber security community. This is because Log4j – rather than being a single piece of software – is a software component that’s used by millions of computers worldwide running online services. This makes Log4Shell potentially the most severe computer vulnerability in years.

The challenges organisations face are therefore:

• finding out what services use the Log4j component
• identifying which of these services your organisation uses
• finding out if these services are vulnerable

Original Source: ncsc[.]gov[.]uk

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon using the button below

To keep up to date follow us on the below channels.