Finding a Path Forward from Log4j in Healthcare

As 2021 came to an end, breaking news rocketed through the cybersecurity community: Researchers had discovered a serious security vulnerability in the widely used Apache Log4j utility that posed a significant risk to enterprise security. Activity over the next couple of weeks followed what has become a familiar script for security professionals. Teams rushed to identify places where their organizations were using Log4j and attempted to patch those deployments before attackers had the opportunity to strike. Experienced security professionals who had lived through the 2014 Heartbleed vulnerability experienced déjà vu as organizations struggled to figure out where they were using this popular open-source component.