Bottom line: The UK has appointed a new commander of the National Cyber Force to oversee the development of its National Cyber Security Strategy.
What's happening: The UK's National Cyber Security Centre (NCSC) has identified vulnerabilities in open-source software, including the Apache Log4j vulnerability (CVE-2022-22846), which has a CVSS score of 9.3.
What to do: Security leaders should review the NCSC's guidance on mitigating the Apache Log4j vulnerability and develop a plan to address the identified vulnerabilities in their own organizations.