LG CNS responds to Log4j security vulnerability
gettyimages
By Baek Byung-yeul
LG CNS has launched a helpdesk support team Tuesday to help customers respond to a security flaw with Log4j, a logging utility for internet servers reported recently to have serious vulnerabilities.
The IT service company said it has already responded by distributing guides to customers explaining how to block suspicious IP addresses, install software updates for Log4j and set up a firewall.
Log4j, developed by non-profit organization Apache Software Foundation, is a Java-based utility for logging and storing information generated by using a computer.
This software has recently been named as the “single biggest, most critical vulnerability of the last decade,” as it has been observed that cyberattackers can take control of a user's computer remotely by entering a specific message through the program. Government agencies, companies and financial firms using it are vulnerable to devastating cyberattacks. A cyberattacker exploiting a related vulnerability could inject malicious code to compromise an entire computer system or network.
Due to the Log4j-related vulnerabilities, the ICT ministry has recommended companies update their cybersecurity systems and urgently take security measures in accordance with the guide of the Korea Internet & Security Agency.
LG CNS's Log4j helpdesk provides a detailed description of the response guide and answers customer inquiries. The company said its helpdesk team is comprised of specialists in a variety of areas including cybersecurity and cloud computing. Additionally, relevant experts have been tasked with addressing key areas including software development and infrastructure.
The company added it is also considering offering its experts to other organizations in need, even if they are not their customers, if the Log4j issue spreads to become a national disaster.
“We have been preemptively providing integrated support measures to our customers so that they can operate their IT systems without worrying about Log4j,” said Bae Min, vice president of LG CNS's security unit.