sb-eu logo
Story image

Not again… Expert discusses potential SECOND Equifax breach

16 Oct 2017

It was only weeks ago that one of the single largest data breaches in history was announced – known simply as the Equifax breach.

And now, news has emerged of another potential compromise at the same company. Last week the credit reporting giant disabled one of its online customer help pages and was investigating the possibility of another breach.

This came after the site was maliciously manipulated for several hours on Wednesday and again Thursday morning  to deliver fraudulent Adobe Flash updates that infected users’ computers with adware when clicked.

However, after its investigations Equifax asserted that its systems hadn’t been compromised and that the scare had not affected its consumer online dispute portal.

An Equifax spokesman reported:

"The issue involves a third-party vendor that Equifax uses to collect website performance data, and that vendor's code running on an Equifax website was serving malicious content. Since we learned of the issue, the vendor's code was removed from the webpage and we have taken the webpage offline to conduct further analysis."

VP of Security Products and Business Strategy at Barracuda, Sanjay Ramnath says the Equifax issues underscore that web applications remain among the most vulnerable threat vectors.

“This is mainly due to the complexity of web app infrastructure, constantly changing code and lack of awareness around the security implications. This is even more relevant as organisations move their applications to cloud platforms like AWS, Azure and GCP,” says Ramnath.

“Anyone can fall victim. To avoid this, organisations should proactively secure their web assets including continuously monitoring their applications for vulnerabilities, protecting their legacy web applications and automatically deploying and scaling security for their cloud workloads.”

Ramnath says businesses need to adapt to modern times as legacy technology is no longer even sufficient.

“In addition to web applications, organisations should also review their overall security posture and ensure that all threat vectors, like email, users and the network perimeter are protected,” says Ramnath.

“They should also ensure that this protection extends across all deployment surfaces, on-premises and cloud included.”

Story image
54% rise in gaming-related cyber attacks recorded in April
Social isolation measures, widely implemented throughout the world during March and April, has been linked to both the increase in engagement for gaming and a corresponding boom in game-related cyber attacks.More
Story image
Surge in encrypted malware prompts warning about detection strategies
“If you are not decrypting and scanning your secure web connections, you are likely missing a large majority of malware,” the report states.More
Story image
Phishing becoming more prolific and impregnable - report
The study, conducted with VirusTotal and WHOIS XML, analysed more than 600,000 domains to accurately track malicious activity throughout the pandemic. More
Story image
Business climate stabilising for tech companies following COVID crisis - report
The survey shows technology companies are continuing to see customer interest in cybersecurity, cloud computing and other areas.More
Story image
Why DX is not complete without a transformed security architecture
Secure Access Services Edge (SASE) is the process by which core WAN edge capabilities like SD-WAN, routing, and WAN optimisation at branch locations are integrated with cloud-based security services like secure web gateways, firewall-as-a-service, cloud access security brokers, and more.More
Story image
Inteview: Mimecast security expert on why email attacks are more successful than ever
Techday spoke to Mimecast Australia principal technical consultant Garrett O’Hara, who walks through why security experts are becoming increasingly pessimistic about email-borne attacks.More