Educause Security Discussion mailing list archives
Re: Summary Report :: Dorkbot Service [MAY 2019-05]
From: "Hall, Rand" <hallr () MERRIMACK EDU>
Date: Tue, 4 Jun 2019 11:47:56 -0400
Um, um, uh...I got one this week ;-) Rand Rand P. Hall Director, Network Services askIT! Merrimack College 978-837-3532 rand.hall () merrimack edu If I had an hour to save the world, I would spend 55 minutes defining the problem and five minutes finding solutions. – Einstein On Tue, Jun 4, 2019 at 10:14 AM Chris Wilson <clwilson () mtroyal ca> wrote:
Steven, It's a good thing it wasn't a private reply, as it prompted me to wonder the same thing. I haven't seen any updates or reports in some time as well. Is there anything you might need from our end to get things running again? Chris Wilson Security Architect I.T. Services Department Mount Royal University 4825 Mount Royal Gate SW Calgary, AB 403-440-8682 clwilson () mtroyal ca On Mon, Jun 3, 2019 at 9:00 PM Lovaas,Steven <Steven.Lovaas () colostate edu> wrote:Apologies... That was meant to be a private reply. Steve Sent from my iPhoneOn Jun 3, 2019, at 8:59 PM, Lovaas,Steven <Steven.Lovaas () colostate edu>wrote:Hi Cam! We do really appreciate this service. But we haven’t had an alert in along time. I’m too suspicious to automatically believe that we just fixed all of our problems.Have you had any issues connecting to Colorado State University? (129.82.0.0/16, colostate.edu)Thanks, Steve Sent from my iPhoneOn Jun 3, 2019, at 8:44 PM, Cam Beasley <cam () utexas edu> wrote: hello all — i wanted to share summary stats from the Dorkbot web applicationsecurity service for the past month.Dorkbot covers 87% of all R1 campuses in the US and many of the topuniversities across 6 continents (and 78 countries).[month = MAY 2019] total campuses subscribed = 1,030 (+29 campuses compared to previousmonth)—————— verified XSS vulnerable pages = 3,032 (+14% compared to previous month) verified SQLi vulnerable pages = 365 (+10% compared to previous month) verified LFI vulnerable pages = 20 (-20% compared to previous month) verified OSi vulnerable pages = 15 (+50% compared to previous month) verified RFI vulnerable pages = 04 (+100% compared to previous month) —————— 3,143 total verified vulnerable pages (+4% compared to previousmonth)++++++++++++++++++++++ % of vulnerability breakdown by campus classification ++++++++++++++++++++++ 44% - Universities in Other Countries 19% - R1 Universities 07% - R2 Universities 05% - Higher Ed Consortiums 04% - M1 Universities 04% - Baccalaureate Colleges: Arts & Sciences Focus 03% - State Agencies 02% - D/PU Universities 02% - Universities in Canada 06% - All Other Entities ++++++++++++++++++++++ signing up for Dorkbot is fast & free. you will receive realtime alerts for any verified vulnerabilitiesalong with a custom monthly report.please see the following for more information: https://security.utexas.edu/dorkbothttps://er.educause.edu/blogs/2019/2/dorkbot-a-managed-application-security-assessment-service-for-higher-educationplease note that many smaller campuses in your area may not be as wellconnected to this community.feel free to share the signup page with any such campuses you might beassociated that could benefit from this service.thanks, ~cam. -- Cam Beasley Chief Information Security Officer Information Security Office The University of Texas at Austin security () utexas edu | 512.475.9242 http://security.utexas.edu =======================================
Current thread:
- Summary Report :: Dorkbot Service [MAY 2019-05] Cam Beasley (Jun 03)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Lovaas,Steven (Jun 03)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Lovaas,Steven (Jun 03)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Chris Wilson (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Hall, Rand (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Valdis Klētnieks (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Cam Beasley (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Chris Wilson (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Frank Barton (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] David Curry (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Frank Barton (Jun 04)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Lovaas,Steven (Jun 03)
- Re: Summary Report :: Dorkbot Service [MAY 2019-05] Lovaas,Steven (Jun 03)