Risk
10/26/2009
05:22 PM
George V. Hulme
George V. Hulme
Commentary
50%
50%

UK Jobs Website Hacked

The news site Guardian is warning members of its UK jobs site that the site has been breached, and that personal data may been snagged.

The news site Guardian is warning members of its UK jobs site that the site has been breached, and that personal data may been snagged.Thanks to a police request (because the incident is under investigation), according to a statement posted by the Guardian, we don't yet know how the breach occurred, or what information was stolen. Here's from the statement over the weekend:

We can confirm that we are investigating a breach of security to the guardian jobs site that we were alerted to yesterday. We have been assured by our provider that the system is now secure and we have identified and contacted everyone who may have been affected. That statement was later updated to explain that about 500,000 users were contacted.
What's liable to have to have been stolen? It's probably a safe assumption that users affected by the breach had their resumes accessed, and contact information. Let's hope no log-on credentials or any credit card information was accessible.

Some will argue that it's no big deal stealing resumes and contact information. But if that's the case, why would cyber thieves engage in what the Guardian described as a "deliberate and sophisticated crime" to anonymously grab data that wouldn't be useful to them?

The only ones who can answer that is the person (or persons) involved in the attack.

There's some reason job sites are being targeted. Earlier this year, job site Monster said it was victimized for the third time in three years.

A reasonable bet is that the data being gleaned from these attacks is for scams, e-mail phishing, voice mail vishing attacks aimed at job seekers.

So, if I had my data held at that site, I'd be on the lookout for some type of targeted attack, or scam, aimed at jobseekers.

Note that this hack only affected the UK jobseekers site, and not the USA Guardian jobs site.

For my security and technology observations throughout the day, consider following me on Twitter.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Companies Blindly Believe They've Locked Down Users' Mobile Use
Dawn Kawamoto, Associate Editor, Dark Reading,  11/14/2017
Microsoft Word Vuln Went Unnoticed for 17 Years: Report
Kelly Sheridan, Associate Editor, Dark Reading,  11/14/2017
121 Pieces of Malware Flagged on NSA Employee's Home Computer
Kelly Jackson Higgins, Executive Editor at Dark Reading,  11/16/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Managing Cyber-Risk
An online breach could have a huge impact on your organization. Here are some strategies for measuring and managing that risk.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.