"Malware Infection Risk" Ministry of Science and ICT Urges Emergency Security Update for 'Apache Log4j'

[Asia Economy Reporter Eunmo Koo] The Ministry of Science and ICT (MSIT) on the 12th urged the immediate application of emergency updates regarding a security vulnerability in Apache Log4j 2, an open-source software (SW) widely used worldwide.

MSIT stated, "We have promptly requested security updates through the Korea Internet & Security Agency (KISA) BohoNara website," adding, "We have urgently disseminated this information to infrastructure operators, Information Security Management System (ISMS) certified companies, and Chief Information Security Officers (CISOs)."

MSIT explained, "If not updated, attackers can exploit the vulnerability to remotely execute attack codes, potentially causing serious damage."

On the 10th (local time), AP News and others reported that a critical security vulnerability was discovered in Log4j, causing significant turmoil in the global cybersecurity industry. The Apache Foundation, which manages Log4j, released a security update addressing this issue on the 6th.

Detailed information on measures related to the Log4j security vulnerability can be found in the security notices on the BohoNara website. When requesting consultation at the KISA Cyber Civil Complaint Center, detailed guidance on whether measures have been taken can be provided.