Log4j has its First Major Victim

A cyber incident occurred with attackers exploited the Apache Log4j vulnerability, of Belgian Defence Ministry government.

All weekend our teams have been mobilized to control the problem, continue our activities and warn our partners,The priority is to keep the network operational. We will continue to monitor the situation.

Officials Statement

Log4j is a widely used logging software present in hundreds of millions of devices. Hackers associated with the governments of China, Iran, North Korea and Turkey have all raced to take advantage of the exploit, according to Microsoft and Mandiant researchers. Ransomware groups have also sought to exploit the vulnerability.

The Belgian Defense Ministry is the first reported high-profile government victim of the vulnerability, but unlikely to be the last given the ubiquity of Log4j in a host of enterprise software popular in the public and private sector.

Affected parts of the Belgian network were segmented after the attack was discovered, Systems including email appear to still be down as of today morning. The Belgian government has not attributed the attack to any group or nation-state.

This has been attributed one of the severe Vulnerability in recent times attributed by CISA and other Security agencies.