Apple will attend the White House meeting to discuss the security risks of open source software

IT House January 13 news, according to Reuters reported that after several major cyber attacks in the United States in 2021, Apple, Google, Amazon, Meta and IBM will attend the White House meeting to discuss the security of open source software. In addition to large tech companies, government agencies including the U.S. Department of Homeland Security, The Department of Defense, and the Department of Commerce will also attend.

According to reports, the meeting will be chaired by US National Security Adviser Jack Sullivan and will focus on "concerns about open source software security and how to improve it." The conference was all about concerns about security vulnerabilities found in the open source software Log4j. IT House understands that the vulnerability poses a threat to organizations using Log4j worldwide, allowing hackers to control systems and execute malicious code remotely.

The vulnerability was discovered last December and caused an iCloud vulnerability in Apple's affected projects.

According to Eclectic Light, Apple has patched the iCloud vulnerability. The site reports that the researchers were able to prove the vulnerability when they connected to iCloud over the network on December 9 and December 10, but the same vulnerability no longer worked on December 11. The vulnerability does not appear to affect macOS.

The vulnerability was exploited in Minecraft before Microsoft patched it over the weekend [...]

Crowdstrike's Adam Meyers said the vulnerability has been "fully weaponized" and that tools can be used at any time to exploit it. "The internet is now the equivalent of a backyard fire," he added shortly after the vulnerability was made public.

According to Sullivan, open source software such as Log4j has a "critical national security issue" because it is often used and maintained by volunteers.