Week 5 CYBR 325

 

Attackers Find a Way Around Security Defenses

I recently read an article from The Hacker News about a cyberattack targeting Oracle PeopleSoft systems. What I found interesting was how the attackers were able to get around Web Application Firewalls (WAFs), which are normally used to help protect websites and applications from attacks.

The attackers took advantage of a vulnerability in Oracle PeopleSoft that could allow them to remotely execute commands without logging in. Instead of sending the attack in the normal format, they changed part of the web address using URL encoding. This allowed the request to get past the WAF because the security tool did not recognize it as a request for the vulnerable part of the system.

Once the attackers got access, they were able to install web shells and other malware that could give them additional control over the compromised systems. The attacks reportedly affected organizations in areas such as education, healthcare, technology, transportation, and government.

What stood out to me most is that even having security tools like a WAF does not completely protect an organization. Attackers are constantly looking for new ways to get around these defenses. This is why organizations need to keep their software updated, patch vulnerabilities quickly, monitor unusual activity, and use multiple layers of security.

My biggest takeaway from this article is that cybersecurity is constantly changing. Security professionals have to stay informed about new attack techniques because attackers are always looking for another way in. 

https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html 

Comments

Post a Comment

Popular posts from this blog

Week 7: Data Privacy

Image
    What Is Data Privacy? 1. Defining Privacy & Data Privacy Privacy is the fundamental right to keep your personal life and information to yourself. Data privacy specifically focuses on protecting your digital personal data—like your name, birthdate, online activity, medical info, and financial details—from unwanted access or sharing 2. Why It Matters in the Digital Age Vast volumes of data are generated whenever you go online—your web behavior, purchases, and even the time spent on a page. Companies analyze this data to personalize ads, predict behavior, and make decisions—but it also means your every action becomes part of a digital footprint   3. Data Privacy vs. Cybersecurity Cybersecurity is about protecting data from unauthorized intrusions, like hacks or malware. Data privacy is about your rights and choices—deciding who gets access to your information and what they can do with it .  Data privacy is all about making informed choices and ...
Read more

Week 3- Attackers Impersonate as Managed Devices

 A report was created that a high-severity vulnerability has been found in Cisco's Nexus Dashboard Fabric Controller which allows unauthenticated attackers to impersonate managed network devices through SSH connections that are compromised. Security researchers from REQON B.V. identified the flaw, which comes from insufficient SSH host key validation mechanisms within the NDFC infrastructure. The affected system fails to properly validate SSH host keys during connection, that allows malicious actors to conduct machine-in-the-middle attacks giving themselves the chance to position themselves between the NDFC controller and managed devices, potentially intercepting and manipulating network management traffic. Attackers that successfully exploit this vulnerability could create persistent backdoors within the managed network environment. Cisco has released software updates to address this vulnerability, with no available workarounds for affected systems. The fix implements enhances the...
Read more

Week 9: Vulnerability Management

Image
   Vulnerability management is a continuous process that identifies, evaluates, treats, and reports security vulnerabilities across systems and software. It helps reduce the attack surface and ensure compliance. The process includes asset discovery, vulnerability scanning, risk prioritization, remediation, and verification. Automation and risk-based tools enhance its efficiency, making it essential for modern cybersecurity strategies. Key Stages (Lifecycle) Asset Discovery Identify and catalog all IT assets—servers, endpoints, apps, networks—which forms the foundation for vulnerability scanning. Vulnerability Scanning Use automated tools to detect known flaws such as misconfigurations, open ports, and out-of-date software across the infrastructure . Prioritization & Risk Rating Assign risk levels (e.g., CVSS scores, severity ratings) based on likelihood, business impact, exploitability, and compliance requirements .. Remediation & Mitigation Apply patches,...
Read more