Chinese state media says regulators suspended an info-sharing partnership with Alibaba Cloud over accusations it failed to promptly report a Log4j vulnerability
One irony here (there are several to choose from) is when I asked for comment on reports that Chinese APTs were taking advantage of the Log4j bug, the Chinese embassy in DC indignantly noted it was China that flagged it for the world in the first place. https://www.scmp.com/...
@campuscodi
Catalin Cimpanu on x
Beijing's reaction in itself is ridiculous, especially since it wasn't Alibaba who discovered it. It was some someone in the Minecraft community. Alibaba just notified Log4j about PoCs being published on forums and Twitter. They literally didn't do anything beyond that.
@campuscodi
Catalin Cimpanu on x
The Chinese government has suspended all Alibaba contracts after the company reported the Log4Shell bug to the Apache Software Foundation first, instead of the government https://www.scmp.com/...
@imposecost
Andrew Thompson on x
“The Ministry of Industry and Information Technology (MIIT) is suspending work with Alibaba Cloud as a cybersecurity threat intelligence partner for six months because the company did not immediately report a severe bug to them.” #log4j https://www.scmp.com/...