Equifax Blames Breach on Apache Struts Flaw

Sep 15, 2017, 00:35
Equifax Blames Breach on Apache Struts Flaw

Leigh-Anne Galloway, cyber security resilience lead at Positive Technologies, said: "Given how often flaws of this nature are discovered, it's therefore not a huge surprise that an exploit of a vulnerability was the entry point for the Equifax breach".

Equifax says the information accessed in this breach includes names, Social Security numbers, birth dates, addresses and, in some instances, driver's license numbers. Shares of rival Experian Plc, which trade in London, dropped as much as 6.4 percent on Thursday.

"The FTC typically does not comment on ongoing investigations", spokesman Peter Kaplan said in a brief email statement.

"Equifax has been intensely investigating the scope of the intrusion with the assistance of a leading, independent cybersecurity firm to determine what information was accessed and who has been impacted", the company wrote.

"We are informing the affected members that the data they shared with Equifax may have been compromised, and are writing Canada's Office of the Privacy Commissioner to express our concern about this breach and to ask that they push Equifax to provide more information to Canadians".

Equifax Blames Breach on Apache Struts Flaw
Equifax Blames Breach on Apache Struts Flaw

Attorney General Marty Jackley is alerting South Dakotans that a data breach of Credit bureau reporter Equifax, has affected 200,000 people in our state. Since the company is holding off the details of its investigation, security experts believe that the attack possibly happened after the patch was made available since it was then widely distributed and publicized. Apache Struts software is especially time-consuming to update because each application needs to be fixed individually.

Hackers had immediately began to exploit the flaw, after it was announced, to break into Equifax's server and install rogue applications and malware.

The vulnerability was a critical weakness for many large websites that were built using the software. While firms usually act within hours or days after an announcement, some companies don't patch for years, he said. We pride ourselves on being a leader in managing and protecting data, and we are conducting a thorough review of our overall security operations'.

"We've added an FAQ to our website to confirm that enrolling in the free credit file monitoring and identity theft protection that we are offering as part of this cybersecurity incident does not waive any rights to take legal action", according to the Equifax website.

Looking forward to 'productive' discussions at BRICS: Modi
Coincidentally, Myanmar was also the first country that Modi had visited after carrying out his first reshuffle. But Chinese foreign minister Wang denied suggestions the summit would be overshadowed by such bigger issues.

Google Assistant coming to more smart speakers, washing machines, and vacuums
You get an Echo Dot-like design with buttons on top as well as a strap to easily carry the TicHome Mini with you everywhere. The last announcement we have today about Google Assistant being embedded into a number of LG appliances later this year.

Chemical Plant Near Houston Warns It's About To Explode
Arkema has plants in half a dozen countries, including 34 in the United States. The company reported the failure to local authorities on Tuesday morning.

YOU MIGHT ALSO LIKE
  • Angelina Jolie makes Toronto International Film Festival a family affair

    Angelina Jolie makes Toronto International Film Festival a family affair

    They've been very fearless . "They need to know that everything's going to be all right even when you're not sure it is". And I'm getting better at all three". "I started to read the book one evening and just couldn't put it down".
    Tom Cruise's ex-wife goes public with Jamie Foxx

    Tom Cruise's ex-wife goes public with Jamie Foxx

    Their romance was one the Hollywood's biggest headline makers after they got engaged in 2005 after just seven weeks of dating. The pair have been a rumored couple since 2013 .
    Angelo Mathews: Sri Lanka Looking to Sign off With a Win

    Angelo Mathews: Sri Lanka Looking to Sign off With a Win

    Dhoni has done the same in the third and fourth match and it is telling that he has remained unbeaten in all three occasions. Kohli praised the people and environment of Sri Lanka and said that they would definitely like to visit Sri Lanka again.
  • Bama uses familiar recipe to beat Florida State

    Bama uses familiar recipe to beat Florida State

    Alabama returns to action Saturday, Sept. 9, with its home opener against Fresno State at Bryant-Denny Stadium. While Alabama's offense struggled to finish for most of the first half , its defense came ready to play.
    National Guard Deploying to Texas for Hurricane Relief

    National Guard Deploying to Texas for Hurricane Relief

    The National Guard has no time to rest. "This is a core competency of the National Guard". "This is what we train for. The Indiana National Guard will lend its help to those affected by Hurricane Harvey in Texas.
    Myanmar army: Rakhine deaths reach 400

    Myanmar army: Rakhine deaths reach 400

    It triggered a fresh influx of refugees towards neighboring Bangladesh though the country sealed off its border for the refugees. It is the first time in Rakhine s bitter and bloody crisis that Hindus have fled - a sign violence is billowing out.
  • Pilots ground Air Berlin flights as bid deadline nears

    Pilots ground Air Berlin flights as bid deadline nears

    The airline has been struggling for some time and over the past two years has announced losses amounting to 1.2bn euros (£1.1bn). Flights from Air Berlin's key hubs in Berlin and Dusseldorf were especially badly hit by cancellations, the airline said.
    Frankfurt - Volkswagen T-Roc kicks off brand renewal

    Frankfurt - Volkswagen T-Roc kicks off brand renewal

    It's also earmarking over 20 billion euros (about $23 billion) to fund the electrification transition. It's also expected to be able to charge to 80 percent in 30 minutes via a 150 kW DC fast charger.
    Juncker: UK has failed to do its Brexit homework

    Juncker: UK has failed to do its Brexit homework

    Davis said on Monday that this week's talks were all about "driving forward the technical discussions across all the issues". The UK isn't taking Brexit very seriously , according to European Commission president Jean-Claude Juncker .
  • The Evidence Against Light Drinking During Pregnancy Is Not Solid Enough

    The Evidence Against Light Drinking During Pregnancy Is Not Solid Enough

    The evidence on how much, if any, is safe to drink, or at what stages of pregnancy, is notable by its absence, they add. Despite research, experts are still unsure how much alcohol - if any - is safe to drink while pregnant.
    Super Eagles victory was down to prayers - Governor Udom

    Super Eagles victory was down to prayers - Governor Udom

    Zambia have four, Cameroon two and Algeria , the most impressive African side at the 2014 World cup in Brazil, only one. The latter who occupy the second spot in the group are now five points behind a revived Super Eagles .
    Xiaomi's Mi Mix 2 Has Entered Mass Production, New Leaked Images Surface

    Xiaomi's Mi Mix 2 Has Entered Mass Production, New Leaked Images Surface

    Last month, the designer posted a "conceptual product design" video, teasing the upcoming Mi Mix 2 with even slimmer bezels. Earlier, in May it was reported that Snapdragon 845 was in development and is expected to be built on a new 7nm process.
popular