Federal security provider sought to hide fact of compromised servers
https://thestack.com/security/2015/09/10/major-web-security-company-sought-to-conceal-that-it-ran-compromised-servers/
A controversy has erupted today at London security
conference 44CON as details emerge of U.S. security company
FireEye's attempts to stifle any public disclosure of a major
series of vulnerabilities in its suite - all of which have now
been patched. The vulnerabilities are said to have included the
default use of the 'root' account on a significant number of the
Apache servers providing services to FireEye's clients.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
