User Tools
ozonsecurityexercise
This is an old revision of the document!
OZON Security Excercise
THIS PAGE IS PART OF THE OZON Security Exercise. THIS MEANS THAT ANY INFORMATION PRESENTED HERE IS A TEST AND NOT A TRUE REPRESENTATION OF THE REAL WORLD.
The Netherlands IT infrastructure is currently under attack and we also are experiencing hacking attacks due to a flood of published vulnerabilities in different packages. Below we describe actions taken to mitigate the effect of these attacks and vulnerabilities on our systems.
| Date: 23 March, 2023 | |
|---|---|
| Time | Description |
| 13:15 | Openssh has a vulneraibility, we have to close all ssh access to the systems for now. Please use our VPN to access our systems from remote |
| 12:35 | Similar to the Dymo label printers several of our HP Printers have a firmware bug that requires us to shut them down until a firmware patch is available |
| 12:10 | Due to a new vulnerability in the owncloud server software for which a patch is not yet available, the owncloud server has been temporarily shutdown |
| 11:30 | We are sorry to inform you that due to a still unknown reason all our passwords have been taken and published on the WEB. Therefor, you need to change your password asap. |
| 10:50 | A vulnerability in several lab equipment software has been revealed. The Lab coordinators have been informed to shutdown any of the affected systems |
| 10:30 | It is better to refrain from running Teams Meetings until vulnerability is resolved. We advice you to use zoom for now |
| 10:18 | Several security vulnerabilities in MSTeams have been revealed. You are advised to not run MS Teams via Wireless network, but use the cabled network |
| 09:50 | We detached all Dymo label printers and have taken them back to the IT department to initiate firmware update process to fix a vulnerability issue |
| 09:30 | Due to a vulnerability in the security CERT key handling software it is possible that what seems to be a secure connection, for instance the green lock on a website, may not be secure. So please inspect the the website addresses. Additional warning about phishing emails, please inform us if you have any trouble with 2FA - in fact report any secure connection trouble |
ozonsecurityexercise.1679644966.txt.gz · Last modified: by deul
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
