Canada Takes Tax Site Offline After Apache Struts AttacksCanada Takes Tax Site Offline After Apache Struts Attacks
Hackers exploit vulnerability in Apache Struts 2 software of Statistics Canada but no damage done.
March 14, 2017
A newly discovered vulnerability in the Apache Struts 2 software has forced the Canadian government to close down the Statistics Canada site used for filing federal taxes, Reuters reports. The site came under attack from hackers but was immediately shut down before any damage could be done.
The security bug in Apache Struts 2 software, used mostly in websites of government, banks, and retailers, was reported last week after the Apache Software Foundation came out with an update to fix the vulnerability. Users of this software around the world spent the weekend patching up this bug which reportedly was being exploited in the wild.
Canadian government official John Glowacki said that other countries "are actually having greater problems with this specific vulnerability.”
“This vulnerability is super easy to exploit," says Chris Wysopal of security software firm Veracode. "You just point it to the web server and put in the command that you want to run."
Read full story here.
About the Author(s)
You May Also Like
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication MethodsOct 26, 2023
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023