FTC warns companies to secure consumer data from Log4J attacks

The US Federal Trade Commission (FTC) has warned it will pursue any US company failing to guard its customers’ data against Log4J cyber attacks. The agency urged companies to update their Log4j software to the latest version, follow CISA guidance for vulnerability mitigation, prevent practices which violate the law, and share this information with appropriate third-party partners. It stated the duty to limit known software vulnerabilities in line with the FTC Act and Gramm Leach Bliley Act was crucial.