Apache has released a security update to address a second severe vulnerability affecting its Log4j software library, which a remote attacker could exploit to cause a denial-of-service condition, the Cybersecurity and Infrastructure Security Agency announced. Affected organizations that have already upgraded to Log4j 2.15.0 will need to upgrade to Log4j 2.16.0 to protect against both vulnerabilities. Log4j is broadly used in a variety of consumer and enterprise services, websites, applications and operational technology products to log security and performance information. 

John Riggi, AHA senior advisor for cybersecurity and risk, said, “It is noted that this second vulnerability could cause a ‘denial-of-service’ condition. A cyberattack that interrupts or shuts down mission-critical medical technology could cause delays in health care delivery and risk patient safety. Thus, we strongly advise the field to expeditiously implement this second patch, and we urge the government to take immediate countermeasures against any cyber actor and their infrastructure identified as attempting to exploit these vulnerabilities.” 

For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org.   
 

Related News Articles

Headline
The Cybersecurity and Infrastructure Security Agency yesterday directed federal agencies to take emergency action to prevent cyber actors from exploiting…
Headline
Cybersecurity authorities in the United Kingdom, Australia, Canada, New Zealand and the United States today urged companies that deliver, operate or manage…
Headline
The Cybersecurity and Infrastructure Security Agency and FBI yesterday updated their February advisory on destructive malware targeting organizations in…
Headline
Cybersecurity authorities in the United States, Australia, Canada, New Zealand and United Kingdom today advised organizations to apply timely patches and…
Headline
Learn why hospital and health system leaders such as Darren Lacey, chief information security officer at Johns Hopkins University/Johns Hopkins Medicine, look…
Headline
The FBI this week released a report detailing indicators of compromise associated with ransomware variants that have compromised at least 60 entities…