U.S. Senate hearing on Tuesday discussed open-source software security. Experts from Cisco, Cisco, Palo Alto Networks’ Unit 42, The Atlantic Council discussed Log4j vulnerability. The widespread flaw in the Java-based logging utility can be exploited to remotely execute code. Other items discussed include a renewed push for incident reporting requirements and the state of affairs with the Russia-Ukraine conflict, particularly around threats to Ukraine’s critical infrastructure. A bipartisan bill that would require critical infrastructure providers to report cyberattacks within 72 hours has been reintroduced.”]
Source: https://www.bankinfosecurity.com/security-experts-discuss-log4j-mitigation-before-us-senate-a-18481