Hackers breach 62 US colleges by exploiting ERP vulnerability

- hacks occur via CVE-2019-8978
- disclosed in May
- hackers create fake accounts
- "used almost immediately for criminal activity [unspecified]," per US Dept. of Educationhttps://t.co/G7KwbRV8i4 pic.twitter.com/lK89YgTH6X

— Catalin Cimpanu (@campuscodi) July 19, 2019

⁦”⁦@usedgov⁩ posted an alert late Wednesday saying that a software program used widely among #highereducation institutions has a severe vulnerability that could allow users to gain access to student records” #edtech #CyberSecurity https://t.co/ZLmDGxKxO1

— Laura G. Anthony (@Laura_G_Anthony) July 19, 2019

This is a good, plain English description of the Ellucian Banner vulnerability(subscription required)
At Least 62 Colleges Were Exploited by a Software Vulnerability. Here’s What You Need to Know. - The Chronicle of Higher Education https://t.co/xAKW2B31D3

— Dr. Liz Gross (@lizgross144) July 19, 2019

The U.S. Ed. Dep. posted an alert late Wed. saying software prog used widely by higher-ed institutions has a severe vulnerability that could allow users to gain access to student records. #highered #HigherEducation #CyberSecurity ⁦@Trainacpa⁩ https://t.co/78IkXNZDWK

— Dan Campbell (@DanCampbellCPA) July 19, 2019

Hackers may have accessed sensitive student data from over 60 colleges as the result of a security flaw in Ellucian’s widely used enterprise resource planning software.https://t.co/cmZjRYPf1H#SaaS #Tech #Ransomware #Websecurity #CyberSecurity #hacking #MI #ML #AI #Marketing

— US Cybersecurity Mag. (@USCyberMag) July 19, 2019

"The U.S. Department of Education has warned of “active and ongoing exploitation” of a security flaw in Ellucian’s Banner system:" Ellucian Banner security flaw highlighted by Education Department https://t.co/ZqbYZ3xyuo via @insidehighered

— WCET (@wcet_info) July 19, 2019

Another educational privacy fail. So many universities use the Banner system. Oops, it’s not secure.

Ellucian Banner security flaw highlighted by Education Department https://t.co/uPsoZ4hbc3

— Joel Reidenberg (@jreidenberg) July 19, 2019

Ellucian Banner security flaw highlighted by Education Department. #higherd #HigherEducation #CyberSecurity ⁦@CapinCrouse⁩ ⁦@Trainacpa⁩ https://t.co/be38yfH7tB

— Dan Campbell (@DanCampbellCPA) July 19, 2019

The House Oversight and Reform Committee demanded that Secretary DeVos turn over emails from her personal account that relate to official government business. We're suing to get her emails too: https://t.co/e5afPEpfJq pic.twitter.com/yJZCT9xVFp

— American Oversight (@weareoversight) July 18, 2019

Hackers breach 62 US colleges by exploiting ERP vulnerability https://t.co/AFh5WrOoOT via @ZDNet & @campuscodi

— George V. Hulme (@georgevhulme) July 20, 2019

I'm so disppointed. I saw *hackers breach colleges* in headline & was briefly excited about something useful to society like stealing info from them to erase predatory loan balances https://t.co/jvcKkjEZs1

— Shoot Your Shot (@KeirstenBrager) July 20, 2019

[Reading]: Hackers breach 62 US colleges by exploiting ERP vulnerability | ZDNet https://t.co/nse7y9ns5b

— Dave Lewis (@gattaca) July 20, 2019

Hackers breach 62 US colleges by exploiting ERP vulnerability | ZDNet https://t.co/RXCVK2X2kb

— David Cawley (@david_cawley) July 20, 2019

Hackers breach 62 US colleges by exploiting ERP vulnerability https://t.co/prKHPRTROx by @campuscodi

— ZDNet (@ZDNet) July 19, 2019

Hackers breach 62 US colleges by exploiting ERP vulnerability (ZDNet) https://t.co/YOQLGgd6Za

— Patrick C Miller (@PatrickCMiller) July 21, 2019

Hackers breach 62 US colleges by exploiting ERP vulnerability https://t.co/vxbbHmAHEd pic.twitter.com/F0e4lQZ6t4

— #AI (@AI__TECH) July 20, 2019

Hackers breach 62 US colleges by exploiting ERP vulnerability | ZDNet https://t.co/f6ocTn6VTI

— Peter Salvitti (@psalvitti) July 20, 2019

Hackers breach 62 US colleges by exploiting ERP vulnerability https://t.co/P4Ez61JJWF

— Evan Kirstel (@evankirstel) July 20, 2019