TP ICAP Investigates Log4Shell to Enhance Security Controls

The UK-based interdealer broker TP ICAP unveiled on Tuesday an update on security vulnerability, which was discovered by the Apache Log4j project, a Java-based logging utility, on Thursday 9 December, 2021. If exploited, the vulnerability could potentially allow a remote attacker to execute code on the server.

According to the announcement, as a priority, the TP ICAP Security team continues to investigate and evaluate the Log4j Java library remote code execution (RCE) vulnerability (CVE-2021-44228), also known as Log4Shell.

The company noted that there was no evidence that this vulnerability has been exploited successfully against TP ICAP. Since learning of the vulnerability, it has been evaluating its exposure and methodically remediating as patches have become available. Additionally, TP ICAP has been deploying signatures and enhanced security controls to further protect its environment from the Log4j exploit.

"Based on ongoing threat intelligence as the situation evolves, we will continue to assess the impact on TP ICAP's systems and remediate or mitigate as required. We will provide further updates as necessary," said the firm.

Fazzaco reported yesterday that the FX trading industry technology provider PrimeXM has been under a hosted MT4/5 server ransomware attack​ last week, which was discovered on Thursday the 9th of December 2021.