NASDAQ out of date software helped hackers -- report

[InfoSec News <alerts () infosecnews org>]

http://www.computerworlduk.com/news/security/3319825/nasdaq-out-of-date-software-helped-hackers--report/?intcmp=focus;home%20page;3319825;nasdaq-out-of-date-software-helped-hackers--report

By Leo King
Computerworld UK
21 November 11

NASDAQ’s ageing software and out of date security patches played a key 
part in the stock exchange being hacked last year, according to the 
reported preliminary results of an FBI investigation.

Forensic investigators found some PCs and servers with out-of-date 
software and uninstalled security patches, Reuters reported, including 
Microsoft Windows Server 2003. The stock exchange had also incorrectly 
configured some of its firewalls.

NASDAQ, which prides itself on running some of the fastest client-facing 
systems in the financial world, does have a generally sound PC and 
network architecture, the FBI reportedly found.

But sources close to the investigation told Reuters that NASDAQ had been 
an “easy target” because of the specific security problems found. 
Investigators had apparently expressed surprise that the stock exchange 
had not been more vigilant.

[...]

_____________________________________________________
Subscribe to InfoSec News - www.infosecnews.org
http://www.infosecnews.org/mailman/listinfo/isn