In 2017, sensitive information of over 140m US consumers was stolen from the major credit bureau -- Equifax. This was due to a known software bug within the Apache Struts framework, a popular application used by web developers to host Java applications, which was in use by the Equifax' IT infrastructure.
A Bug That Wasn't Squashed
Even though a fix was released by the Apache Software Foundation, the IT team did not take action to mitigate the issue, probably due to thousands of other vulnerabilities they had to deal with, and with no way of prioritizing tasks.
Patching the security hole would have been labor-intensive, having to download the updated version of Struts and use it to rebuild ALL apps that used the outdated version. Then, test to ensure they don't break key functions on the site.
The Importance of Prioritization
Vicarius offers a next-generation vulnerability scanner that could have easily mitigated the situation, by finding the problem immediately without waiting for a periodical scan. Then, it would highlight the Apache Tomcat software as highly critical because of its execution environment on the specific web servers.
Vicarius’ Topia would prioritize the most updated security vulnerabilities to the IT security team at the organization, allowing them to take action to what REALLY matters. If these strategies were implemented into Equifax, the massive breach could have been avoided.
Written by
Michael Assraf
Recent Posts
1
Most Common Mac Malware
Kent Weigle April 23, 20212
Are Macs Safe from Spyware?
Kent Weigle April 23, 20213
Mac User? Pay Attention to These Threats
Kent Weigle April 23, 20214
Mac Ransomware: Fact or Fiction
Kent Weigle April 22, 20215
Macs are Vulnerable, Too
Kent Weigle April 21, 2021
Related Posts
Most Common Mac Malware
Over the years, malware targeting Macs has changed from marginal to the mainstream. Windows users always need to check malicious programs.
Are Macs Safe from Spyware?
Spyware is one of the most deceptive malware out there. Can it infect Mac? Yes, it’s a Mac cyber security threat. Do not allow cyber attackers or other dubious characters to spy on you. Get spyware removal for Mac immediately. Whether you want to remove the spyware manually or with a spyware tool, you should remove spyware from your Macintosh or Apple system as quickly as possible.
Mac User? Pay Attention to These Threats
While Macs are typically more secure than their competitors, it does not mean they are impenetrable. Macs are vulnerable to cyber attacks as criminals are getting more sophisticated. Recently, Apple accidentally approved malware to run on MacOS.
Start Closing Security Gaps
- Risk reduction from Day 1
- Fast set-up and deployment
- Unified platform
- Full-featured 30-day trial