(Quebec) Quebec orders the preventive closure of 3,992 government internet sites and services following the discovery of a major security breach affecting computer systems around the world.
The “Log4Shell” flaw allows a cyber hacker to execute computer codes on organizations’ servers and to take control of their system in a way. A Java library from the Apache company, widely used around the world, is affected. The flaw was discovered on December 10.
The Government Cyber Defense Center became aware of this vulnerability the same day and asked various IT security officials to detect this flaw.
SCREENSHOT
The website of the Ministry of Education and Higher Education was not accessible on Sunday.
“Given the large number of systems to be examined, and the level of criticality of this vulnerability, the Chief Information Officer asked Quebec public bodies, after receiving authorization from the Minister responsible for Governmental Digital Transformation, the December 11, to close the sites and services accessible by Internet. The sites and services can only be made available again if it is confirmed that they are not affected by the vulnerability or that it has been corrected, ”the government indicates.
Quebec specifies that we have not detected for the moment any activity suggesting that a hacker has exploited this flaw.