Tech »  Topic »  Experts Insight On UN’s Environmental Program Breach-100K+ Employee Records Leaked

Experts Insight On UN’s Environmental Program Breach-100K+ Employee Records Leaked


A data breach has been discovered in the United Nations which exposed over 100k of UNEP’s staff records. Researchers with Sakura Samurai, an ethical hacking and research group, discovered the records were accessible through the UN’s Vulnerability Disclosure Program. The data accessible included administrator database credentials, employee ID’s, name’s, travel justifications, start and end dates, as well as their HR demographic data. 

Usually when you talk about hacking, you talk about vulnerabilities, which are flaws in software, and we talk about configurations or the human element. In this case, the flaws we see are all related to users configuring those servers leaving files exposed and software misconfigured. Those are flaws in usage, not flaws in software. It is in parts further concerning as those systems were internet exposed, and in turn, held credentials for other systems. With access to some of the indicated information and the ...


Copyright of this story solely belongs to informationsecuritybuzz.com . To see the full text click HERE