{"id":3395,"date":"2024-04-15T16:20:38","date_gmt":"2024-04-15T16:20:38","guid":{"rendered":"https:\/\/internationalpulse.net\/?p=3395"},"modified":"2024-04-15T16:20:38","modified_gmt":"2024-04-15T16:20:38","slug":"owasp-discloses-data-breach-caused-by-misconfiguration","status":"publish","type":"post","link":"https:\/\/internationalpulse.net\/?p=3395","title":{"rendered":"OWASP discloses data breach caused by misconfiguration"},"content":{"rendered":"<p><\/p>\n<div>\n<p><em><small>Homework: Image by Tony Alter (CC BY 2.0)<\/small><\/em><\/p>\n<p>The Open Worldwide Application Security Project (OWASP) Foundation, a nonprofit foundation launched in December 2001 that focuses on software security, has disclosed a data breach after some members\u2019 resumes were exposed online due to a misconfiguration of its old Wiki web server.<\/p>\n<p>Looking into this cybersecurity matter for <em>Digital Journal <\/em>is Jason Kent\u2019s, Hacker In Residence at Cequence Security.<\/p>\n<p>Kent begins by stating why this particular cybersecurity incident has caught his attention: \u201cAs a member and someone who participates in this community, this obviously makes me sad and ask questions. OWASP\u2019s goal is to help organizations find problems with their web applications, application code, and server frameworks.\u201d<\/p>\n<p>The expert then proceeds to look at the significance of the incident: \u201cTo have a web application data breach is a bit of egg on the face of OWASP as a whole but, we aren\u2019t the kind of folks that wonder why. We get to the heart of it, fix it, and make sure everyone knows what happened and how to stop it.\u201d<\/p>\n<p>In terms of the impact of the incident, Kent assesses: \u201cThe data that was lost, at the newest, was a decade to almost 2 decades old. This fact doesn\u2019t make the loss of data any better but remember, immediately prior to 2014 every person in the USA\u2019s data was lost when Equifax was breached and all of that data was extremely up to date. OWASP no longer collects this data and has moved to new systems.\u201d<\/p>\n<p>From any major event, learning from the situation provides at least something tangible from a disaster. Here Kent poses: \u201cSo what can be learned? Directory Traversal needs to be disabled (it is by default on most systems now) and data retention policies are extremely important for a reason. If they had purged all data when they moved to the new systems a couple of years ago, this wouldn\u2019t have happened. If you read the announcement from OWASP you can see the steps they are taking and you should take if you are part of this\u201d<\/p>\n<p>Kent cautions that the incident could be repeated and this means several firms could well be vulnerable to a future attack. Here he states: \u201cIf it can happen to an organization of volunteers that are wanting the world to be a safer place, it can happen to your organization of security professionals dedicated to your environment being a safer place.\u201d<\/p>\n<p>The recent transparency with the cybersecurity event brings Kent to conclude: \u201cThank you to OWASP for being open and honest and being an example of how to respond when the inevitable happens.\u201d<\/p>\n<\/p><\/div>\n<p> OWASP discloses data breach caused by misconfiguration<br \/>\n<br \/>#OWASP #discloses #data #breach #caused #misconfiguration<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Homework: Image by Tony Alter (CC BY 2.0) The Open Worldwide Application Security Project (OWASP)&#8230;<\/p>\n","protected":false},"author":1,"featured_media":3396,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[7],"tags":[2107,2108,2106,2105,2109,2104],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.10 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>OWASP discloses data breach caused by misconfiguration - International Pulse<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/internationalpulse.net\/?p=3395\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OWASP discloses data breach caused by misconfiguration - International Pulse\" \/>\n<meta property=\"og:description\" content=\"Homework: Image by Tony Alter (CC BY 2.0) The Open Worldwide Application Security Project (OWASP)...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/internationalpulse.net\/?p=3395\" \/>\n<meta property=\"og:site_name\" content=\"International Pulse\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-15T16:20:38+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/internationalpulse.net\/?p=3395\",\"url\":\"https:\/\/internationalpulse.net\/?p=3395\",\"name\":\"OWASP discloses data breach caused by misconfiguration - International Pulse\",\"isPartOf\":{\"@id\":\"https:\/\/internationalpulse.net\/#website\"},\"datePublished\":\"2024-04-15T16:20:38+00:00\",\"dateModified\":\"2024-04-15T16:20:38+00:00\",\"author\":{\"@id\":\"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3\"},\"breadcrumb\":{\"@id\":\"https:\/\/internationalpulse.net\/?p=3395#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/internationalpulse.net\/?p=3395\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/internationalpulse.net\/?p=3395#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/internationalpulse.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OWASP discloses data breach caused by misconfiguration\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/internationalpulse.net\/#website\",\"url\":\"https:\/\/internationalpulse.net\/\",\"name\":\"International Pulse\",\"description\":\"There&#039;s a different sound here\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/internationalpulse.net\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/internationalpulse.net\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/demo6.aiwalls.com\/automatic-news\"],\"url\":\"https:\/\/internationalpulse.net\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OWASP discloses data breach caused by misconfiguration - International Pulse","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/internationalpulse.net\/?p=3395","og_locale":"en_US","og_type":"article","og_title":"OWASP discloses data breach caused by misconfiguration - International Pulse","og_description":"Homework: Image by Tony Alter (CC BY 2.0) The Open Worldwide Application Security Project (OWASP)...","og_url":"https:\/\/internationalpulse.net\/?p=3395","og_site_name":"International Pulse","article_published_time":"2024-04-15T16:20:38+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/internationalpulse.net\/?p=3395","url":"https:\/\/internationalpulse.net\/?p=3395","name":"OWASP discloses data breach caused by misconfiguration - International Pulse","isPartOf":{"@id":"https:\/\/internationalpulse.net\/#website"},"datePublished":"2024-04-15T16:20:38+00:00","dateModified":"2024-04-15T16:20:38+00:00","author":{"@id":"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3"},"breadcrumb":{"@id":"https:\/\/internationalpulse.net\/?p=3395#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/internationalpulse.net\/?p=3395"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/internationalpulse.net\/?p=3395#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/internationalpulse.net\/"},{"@type":"ListItem","position":2,"name":"OWASP discloses data breach caused by misconfiguration"}]},{"@type":"WebSite","@id":"https:\/\/internationalpulse.net\/#website","url":"https:\/\/internationalpulse.net\/","name":"International Pulse","description":"There&#039;s a different sound here","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/internationalpulse.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/internationalpulse.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g","caption":"admin"},"sameAs":["http:\/\/demo6.aiwalls.com\/automatic-news"],"url":"https:\/\/internationalpulse.net\/?author=1"}]}},"featured_image_urls":{"full":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019.jpg",1920,1281,false],"thumbnail":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-150x150.jpg",150,150,true],"medium":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-300x200.jpg",300,200,true],"medium_large":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-768x512.jpg",640,427,true],"large":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-1024x683.jpg",640,427,true],"1536x1536":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-1536x1025.jpg",1536,1025,true],"2048x2048":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019.jpg",1920,1281,false],"covernews-slider-full":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-1115x715.jpg",1115,715,true],"covernews-slider-center":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-800x500.jpg",800,500,true],"covernews-featured":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-1024x683.jpg",1024,683,true],"covernews-medium":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-540x340.jpg",540,340,true],"covernews-medium-square":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/04\/Homework_8120708019-400x250.jpg",400,250,true]},"author_info":{"display_name":"admin","author_link":"https:\/\/internationalpulse.net\/?author=1"},"category_info":"<a href=\"https:\/\/internationalpulse.net\/?cat=7\" rel=\"category\">Stories<\/a>","tag_info":"Stories","comment_count":"0","_links":{"self":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/posts\/3395"}],"collection":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3395"}],"version-history":[{"count":0,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/posts\/3395\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/media\/3396"}],"wp:attachment":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3395"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3395"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}