Happening now-@CISAgov update on #Log4j shell: "This really is the most serious vulnerability I've seen in my career" per Director @CISAJen
Likely present in hundreds of millions of products worldwide, & exploiting vulnerability "trivial" she adds
Likely present in hundreds of millions of products worldwide, & exploiting vulnerability "trivial" she adds
"We have seen widespread exploitation" by criminal actors & seen some reports of more significant activity, per @CISAJen
But @CISAgov cannot independently confirm some reported use/exploitation by foreign adversaries
But @CISAgov cannot independently confirm some reported use/exploitation by foreign adversaries
.@CISAgov continues to push for remediation and strengthening security protocols as it leads US response, per @CISAJen
CISA's webpage with guidance has already gotten 330,000 page views since it was stood up almost a month ago
Another tool downloaded @ 4,000 times
CISA's webpage with guidance has already gotten 330,000 page views since it was stood up almost a month ago
Another tool downloaded @ 4,000 times
"We at this point are not seeing any confirmed compromises of federal agencies...including critical infrastructure" per @CISAgov's Eric Goldstein "We are not at this point seeing destructive attacks...it is certainly possible that that may change"
CISA in touch with many vendors, especially those connected to critical infrastructure & for the most part they have been responsive, per @CISAgov's Goldstein
"We have no confirmed #ransomware intrusions where we can authoritatively state that #Log4shell was used" per @CISAgov's Goldstein
More on #Log4j-#ransomware: "We don't have incident reporting legislation that would help us get better visibility of that" per @CISAJen
Says also possible there could be some lag
Says also possible there could be some lag
.@CISAgov keeping a very close eye on hospitals in regards to concerns about #ransomware attacks, per @CISAJen
"We are concerned that threat actors are going to start taking advantage of this vulnerability & having impacts in particular on critical infrastructure, & because there is no legislation in place, we will likely not know about it" per @CISAJen
"It's important that such legislation is passed to ensure that CISA & our partners receive timely information about successful exploitation, in particular of critical infrastructure networks, as soon as possible after they are discovered" per @CISAJen
• • •
Missing some Tweet in this thread? You can try to
force a refresh
