Experian Was Vulnerable to Same Attack Behind Equifax Breach

Status
Not open for further replies.

rabenny203

Prominent
Sep 16, 2017
1
0
510
Claiming that Efx failed to patch in March is a falsehood, motive undetermined.
From Efx's Sept bulletin:
"The particular vulnerability in Apache Struts was identified and disclosed by U.S. CERT in early March 2017.
Equifax’s Security organization was aware of this vulnerability at that time, and took efforts to identify and to patch any vulnerable systems in the company’s IT infrastructure. "
 

USAFRet

Illustrious
Moderator


"took efforts" does not necessarily equal "did".

In any case, they were broken into. Whatever they did or did not do, was not enough.

Meanwhile, thee and me are left to look over our shoulders forever.
Meanwhile, people with degrees in Music and Russian are "retiring". hmmm....
http://money.cnn.com/2017/09/15/news/equifax-top-executives-retiring/index.html
 

gamerk316

Distinguished
Jul 8, 2008
325
0
19,060
As a general rule, IT will always be several months behind security patches, minimum. Security is not mandated, so is not considered important. Until something happens.
 
Status
Not open for further replies.