فا

‫ First sites admit data loss through Heartbleed attacks

Number:IRCNE2014042161
Date: 2014-04-15

According to “computerworld”,Canada's tax authority and a popular British parenting website both lost user data after attackers exploited the Heartbleed SSL vulnerability, they said Monday.

The admissions are thought to be the first from websites that confirm data loss as a result of Heartbleed, which was first publicized last Tuesday. The flaw existed in Open SSL, a cryptographic library used by thousands of websites to enable encryption, and was quickly labeled one of the most serious security vulnerabilities in years.

The Canada Revenue Agency (CRA) blocked public access to its online services last Tuesday in reaction to the announcement, but that wasn't fast enough to stop attackers from stealing information, it said on its website.

"Regrettably, the CRA has been notified by the Government of Canada's lead security agencies of a malicious breach of taxpayer data that occurred over a six-hour period. Based on our analysis to date, Social Insurance Numbers of approximately 900 taxpayers were removed from CRA systems by someone exploiting the Heartbleed vulnerability."

Mumsnet, a British parenting website with more than a million registered users, said over the weekend that it was forcing all users to change their passwords as a result of a Heartbleed attack.

"We are very sorry for all the fuss," the site said. "We want to assure you that we followed all the published steps to protect members' security as soon as we became aware of the Heartbleed security risk, but it seems that the breach occurred prior to that risk becoming known."

Related Links:

Heartbleed bug can expose private server encryption keys

BlackBerry to release Heartbleed fixes for BBM Messenger, Secure Work Space

Lagging Android devices vulnerable to Heartbleed

Apple's iOS, OS X don't have Heartbleed bug but BBM for iOS and Android do

Cisco, Juniper products affected by Heartbleed

'Heartbleed' bug in OpenSSL puts encrypted communications at risk



نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 26 فروردین 1393

دسته‌ها

امتیاز

امتیاز شما
تعداد امتیازها: 0