The most serious opensource software security flaw ever?

Major tech firms struggle to contain the fallout, as hackers are actively exploiting the vulnerability.
 
Hundreds of millions of devices around the world could be exposed to a newly revealed software vulnerability which is likely to be present in popular apps and websites, and consumers could feel the fallout if those services get hacked.
 
This is a major software security issue that could affect us all caused by a flaw in some opensource code:- Log4j 2 is an opensource Java logging library developed by the Apache Foundation.
​

Last week Elin Hauge and I wrote a blog about opensource software risks (start-up opensource nightmare) this included a paragraph on opensource ‘open-door’ security weakness. 

• Opensource software may have unknown weaknesses exposing a business to risk of data breaches. Software code vulnerabilities are easier to determine and exploit in opensource software. For example: Scotiabank stored highly sensitive data in publicly open and accessible GitHub repositories, exposing its internal source code, login credentials, and confidential access keys! And Fortnite users were targeted by ransomware masquerading as a game hack tool for Fortnite but, on being downloaded, locked up the user’s computer and demanded a ransom!

 
There is a race against time to address flaw

The Apache Software Foundation, which manages the Log4j software, has released a security fix for organizations to apply.

The UK National Cyber Security Centre has issued advice to address the vulnerability: 
​https://www.ncsc.gov.uk/news/apache-log4j-vulnerability

Contact John

Protecting your Business Idea with Intellectual Property
Protecting #Innovations with #Patents and #Brands with Registered #Trademarks also with Unregistered Trademarks, #DigitalBrand #BrandProtection and #SocialMedia. ​Help with using #Copyright and #TradeSecrets to protect your Software and Business. 

We Can Help You so call +447587885131 for a Confidential and Free Initial Chat or check www.Exaltip.com for more information.     

#intellectualpropertysolutions #valuedrivingintellectualproperty #entrepreneurs #startups #founders #brand #innovation #knowhow #reputation #intellectualproperty
#smallbusiness #smallbusinessowner #smallbusinesssupport 
#startup #innovation #UKbusiness #SME #IP #intellectualproperty #smallbusinessuk #smallbusiness #smebusiness #smallbusinessowners #smallbusinessownerlife #onlinebusinessuk #onlinebusiness

​