Log4j software flaw ‘endemic’, US cybersecurity panel says

Department of Homeland Security under secretary Rob Silvers is chairman of the Cyber Safety Review Board (Pablo Martinez Monsivais/AP)

A computer vulnerability discovered last year in a ubiquitous piece of software is an “endemic” problem that will pose security risks for potentially a decade or more, according to a new cybersecurity panel created by US President Joe Biden.

The Cyber Safety Review Board said in a report on Thursday that while there has not been a sign of any major cyberattack due to the Log4j flaw, it will still “be exploited for years to come”.