laitimes

Belgium has publicly admitted to being attacked by the Log4j vulnerability, which led to partial cyber downtime for the Ministry of Defense

Belgian government officials have publicly acknowledged being attacked by the recently exposed Apache Log4j vulnerability. The attack left part of the Belgian Defense Ministry's computer network shut down since Thursday. Spokesman Olivier Séverin told the news publication VRT: "Throughout the weekend our team was mobilized to control the problem, continue our campaign and warn our partners. The priority is to keep the network running. We will continue to monitor this situation.".

Belgium has publicly admitted to being attacked by the Log4j vulnerability, which led to partial cyber downtime for the Ministry of Defense

Log4j is a widely used recording software that exists in hundreds of millions of devices. According to Microsoft and Mandiant researchers, hackers linked to the governments of Iran, North Korea and Turkey are all vying to exploit the vulnerability. Ransomware groups are also trying to exploit this vulnerability. The Belgian Ministry of Defense is the first high-profile government victim to report the vulnerability, but given the ubiquity of Log4j in many enterprise software popular in the public and private sectors, it cannot be the last.

Séverin said that after the attack was discovered, the affected parts of the Belgian network were split. As of Monday morning, the system, including email, still appeared to be in a state of paralysis.

The Belgian government did not blame any group or nation-state for the attack.

Read on