Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

3/11/2019
01:30 PM
50%
50%

Hackers Break into System That Houses College Application Data

More than 900 colleges and universities use Slate, owned by Technolutions, to collect and manage information on applicants.

As if applying to college wasn't nerve-wracking enough: Last week hackers broke into a system that houses prospective students' application data, then promised students access to their files — for the price of a single Bitcoin.

More than 900 colleges and universities use Slate, owned by Technolutions, to collect and manage information on applicants. Three colleges were affected by the breach: Oberlin College in Ohio, Grinnell College in Iowa, and Hamilton College in New York. Prospective students were sent emails promising access to confidential information, including comments from admissions officers  and tentative acceptance decisions, upon payment of a Bitcoin. Later emails offered limited subsets of student files for $60.

No other universities were affected by the breach, Technolutions said. Oberlin, Grinnell, and Hamilton advised prospective students not to pay the attackers and said they are working with law enforcement on the case.

Read here and here for more.

 

 

Join Dark Reading LIVE for two cybersecurity summits at Interop 2019. Learn from the industry's most knowledgeable IT security experts. Check out the Interop agenda here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
3/14/2019 | 2:47:07 PM
Re: Not again
Thanks much for the clarification --- yeap, always another way in. 
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
3/13/2019 | 3:45:11 PM
Re: Not again
Thanks for the summation. I wanted to read further but since I don't have a subsciption to WSJ and don't intend to unblock ads for the Washington Post I cannot. What SSO Solution was in use? This is a rather large flaw allowing anyone to reset a password without valid authentication that you are the owner of the account.
ColeMaddox
50%
50%
ColeMaddox,
User Rank: Apprentice
3/11/2019 | 2:21:30 PM
Re: Not again
This article is click bait. The systems were not "hacked." What has been reported is that the three schools in question had a flaw in their password reset protocol that allowed unauthorized users to reset passwords. So it wasn't Slate, rather it was the SSO password reset solution in use at the schools.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
3/11/2019 | 2:07:45 PM
Not again
And who opened up the infected email that brought this one down?
Where Businesses Waste Endpoint Security Budgets
Kelly Sheridan, Staff Editor, Dark Reading,  7/15/2019
US Mayors Commit to Just Saying No to Ransomware
Robert Lemos, Contributing Writer,  7/16/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-12815
PUBLISHED: 2019-07-19
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.
CVE-2019-13569
PUBLISHED: 2019-07-19
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.
CVE-2019-9228
PUBLISHED: 2019-07-19
** DISPUTED ** An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management TELNET features allow remote attackers to cause a denial of service (connection slot e...
CVE-2019-12725
PUBLISHED: 2019-07-19
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.
CVE-2019-11989
PUBLISHED: 2019-07-19
A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, ...