Re:The OPM Data Breach [pdf]
by j1tt3r on Thursday September 08, 2016 @11:52PM
(#12459535)
OPM's e-QIP site was vulnerable to heartbleed for at least a week after public disclosure (2014).
They still claim that they were never exploited.
The arrest records, addresses, and other sensitive info I was able to view say otherwise.
I expected the EINSTEIN program would have helped to quickly defend against heartbleed after disclosure, but apparently not. US Gov just sucks at cybersecurity defense.
They still claim that they were never exploited. The arrest records, addresses, and other sensitive info I was able to view say otherwise.
I expected the EINSTEIN program would have helped to quickly defend against heartbleed after disclosure, but apparently not. US Gov just sucks at cybersecurity defense.