Shellshock is a newly emerged major Internet
threat that affects a common software tool found in many
operating systems known as Bash, or Bourne-again Shell.
"The pervasive use of Bash and the potential for this
vulnerability to be automated presents a material risk," the
Federal Financial Institutions Examinations Council said.
The FFIEC is an interagency body that can prescribe common
standards for banks that includes the Federal Reserve, the
Federal Deposit Insurance Corporation, the Office of the
Comptroller of the Currency, and others.
The banks should identify all their systems that use Bash and
update them, and should also check third-party software, the
group of regulators said.
(Reporting by Douwe Miedema; Editing by David Gregorio)
[© 2014 Thomson Reuters. All rights
reserved.] Copyright 2014 Reuters. All rights reserved. This material may not be published,
broadcast, rewritten or redistributed.
|
|