CISA Issues Statement on Log4j Critical Vulnerability

CISA has issued a statement that they are taking “urgent action” in response to a reports from security analysts about a “critical vulnerability” in Log4j, a java-based tool from Apache’s open source library used for parsing logs.