Becerra urges health care sector’s vigilance against Log4j software threat 

Health and Human Services Secretary Xavier Becerra today in a letter to health care and public health leaders urged vigilance against cyber threats posed by a vulnerability within the Apache Log4j software. Exploitation of the software, which exists in thousands of applications, including control systems for medical devices and hardware, can result in data exfiltration or ransomware that can significantly disrupt the delivery of health care. Becerra strongly encouraged the implementation of Department of Homeland Security Cybersecurity and Infrastructure Security Agency guidance on the Apache Log4j information; reviews of cybersecurity resources from HHS and CISA; network monitoring and raised cybersecurity awareness to maintain readiness in emergency operations procedures and continuity plans; and promptly reporting any cybersecurity incidents to CISA or the FBI.