Making Tech Headlines · Page 7
DigiCert's Server Move Gives an Internal System an Unwanted Public Address
· New York time
DigiCert says it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet. The exposure allowed unauthorized access to customer information and identity documents, according to the company's warning. For a business that operates in digital trust, the incident puts a mundane administrative task at the center of an uncomfortable security story. Moving a server sounds like a matter for a checklist until a system intended for internal use becomes reachable from outside. Customer information and identity documents are sensitive precisely because they can remain useful to someone long after the migration itself is complete. DigiCert's warning identifies the exposure and unauthorized access, rather than establishing that every customer suffered the same consequence. The incident is also a reminder that security depends on the configuration surrounding a system as well as the software on it. A server can be doing the job it was given and still be in the wrong place from a security standpoint. The business of trust relies on such distinctions, even when a migration schedule would prefer them to be routine. The most dramatic part of the story is not an exotic gadget or a cinematic intrusion. It is the humble boundary between an internal system and the public internet, which turned out to be a very important line on the moving plan.
Read this story in the full newspaper →Satire. Not factual reporting. Read the original reporting from the linked publishers.