{"id":2367,"date":"2019-08-16T12:32:39","date_gmt":"2019-08-16T12:32:39","guid":{"rendered":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?p=2367"},"modified":"2022-07-06T18:45:29","modified_gmt":"2022-07-06T18:45:29","slug":"examining-the-cyberattack-on-popular-education-erp-platform","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/","title":{"rendered":"Examining the Cyberattack on Popular Education ERP Platform"},"content":{"rendered":"

\"\"<\/p>\n

Last month, Ellucian\u2019s widely used Banner Web Tailor<\/a> ERP platform for colleges that contain students\u2019 personal and financial data was almost breached. Ellucian works with more than 2,500 institutions in more than 50 countries, helping manage student grades, staff payrolls, course schedules, admissions and student assistance. The cyberattack alert by the Education Department said an \u201cactive and ongoing exploitation\u201d of a security flaw in the Banner system gave the hackers access to students\u2019 grades, family finances and Social Security numbers.<\/p>\n

“Our ongoing research with targeted institutions has led us to a broader concern regarding the front-end registration portals used by institutions. Specifically, some institutions are using third-party software as front-end access points to the Ellucian Banner System and similar administrative tools. We strongly encourage every institution to review these third-party front-end applications to ensure that they are not introducing vulnerabilities (in need of patches) or increasing the risk of a potential future issue through automation attacks,” the FSA reported.<\/a><\/p>\n
Widget not in any sidebars
\n

Security Threat<\/h2>\n

According to the Education Department, the vulnerability, tracked as CVE-2019-8978<\/a>, was discovered by the security expert Joshua Mulliken, it affects the authentication process used by the two modules of the ERP, including the\u00a0EllucianBanner Enterprise Identity Services used to manage user accounts.<\/p>\n

\u201cAn improper authentication vulnerability (CWE-287) was identified in Banner Web Tailor and Banner Enterprise Identity Services. This vulnerability is produced when SSO Manager is used as the authentication mechanism for Web Tailor, where this could lead to information disclosure and loss of data integrity for the impacted user(s).\u201d reads the <\/em>Security Advisory<\/em><\/a>.<\/em><\/p>\n

However, Ellucian said that too date (based on reports from targeted institutions) they have not found any instances where the Ellucian Banner System vulnerability has been exploited or is related to the issues described in the original alert. The U.S. Department of Education (Department) is continuing to work with colleges and universities to determine what impact, if any, the Ellucian Banner System vulnerability may have had.<\/p>\n

How to Keep Your ERP Data Safe<\/h2>\n

We all know the importance of cybersecurity within any environment, whether it be an institution or workplace, is nothing to overlook.<\/p>\n

    \n
  1. \n
    Scheduled Backups:<\/strong>\u00a0One of the best protection methods is the simplest \u2013 schedule regular backups. Having multiple copies ensures your most important business data can\u2019t be held to ransom. Cloud services should backup automatically, but you should still make the effort to make a physical drive too, just in case.\u00a0 By backing up data on a different laptop or external hard drive, disconnected from the internet, you are 100% protected from cyber-attack.<\/h5>\n<\/li>\n
  2. \n
    Anti-virus Software:\u00a0<\/strong>This is another simple way to protect the data in your ERP system. Anti-virus software is the first line of defence to make sure the stringent backups are never needed. A good anti-virus solution will regularly scan your system for any known threats (and unknown threats) to expel them.<\/h5>\n<\/li>\n
  3. \n
    Blockchain Technology:\u00a0<\/strong>An Internet of Things (IoT) platform built of a blockchain can securely automate your factory operations.\u00a0The complexity of a blockchain is what makes it incredibly secure, for a cyber-attack to be successful, the hacker would need to have access to every copy of the database simultaneously. Spreading the database across a network on multiple computers makes this an almost impossible task.<\/h5>\n<\/li>\n
  4. \n
    Employee Education \/ Training:\u00a0<\/strong>Educating your staff \/ employees on ransomware and how it infect a computer system is another simple prevention method. Make them aware of how important it is to be cautious about emails that are even slightly out of the ordinary because\u00a0even official looking ones can be from a malicious source.<\/h5>\n<\/li>\n<\/ol>\n
    \n

    Looking for more? Download our\u00a0<\/span>Enterprise Resource Planning Buyers Guide<\/a> for free to compare the top-24 products available on the market with full page vendor profiles, key capabilities, an ERP software market overview, our bottom line analysis, and questions for prospective buyers.<\/span><\/em><\/p>\n

    And don’t forget to follow us on\u00a0Twitter<\/a>,\u00a0Facebook\u00a0<\/a>and\u00a0LinkedIn<\/a>\u00a0for all the latest in the ERP space!<\/em><\/p>\n

    \t\t\t

    \"Download<\/a> \"Download<\/a> \"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

    Last month, Ellucian\u2019s widely used Banner Web Tailor ERP platform for colleges that contain students\u2019 personal and financial data was almost breached. Ellucian works with more than 2,500 institutions in more than 50 countries, helping manage student grades, staff payrolls, course schedules, admissions and student assistance. The cyberattack alert by the Education Department said an […]<\/p>\n","protected":false},"author":34,"featured_media":4692,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[659,658,11,379],"acf":[],"yoast_head":"\nExamining the Cyberattack on Popular Education ERP Platform<\/title>\n<meta name=\"description\" content=\"In this post, we discuss a little of what happened with the cyberattack on Ellucian\u2019s popular education ERP platform and how to avoid these situations.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Examining the Cyberattack on Popular Education ERP Platform\" \/>\n<meta property=\"og:description\" content=\"In this post, we discuss a little of what happened with the cyberattack on Ellucian\u2019s popular education ERP platform and how to avoid these situations.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/\" \/>\n<meta property=\"og:site_name\" content=\"Best ERP Software, Vendors, News and Reviews\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-16T12:32:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-06T18:45:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Elizabeth Quirk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Worktech_Review\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elizabeth Quirk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/\",\"name\":\"Examining the Cyberattack on Popular Education ERP Platform\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg\",\"datePublished\":\"2019-08-16T12:32:39+00:00\",\"dateModified\":\"2022-07-06T18:45:29+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\"},\"description\":\"In this post, we discuss a little of what happened with the cyberattack on Ellucian\u2019s popular education ERP platform and how to avoid these situations.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Examining the Cyberattack on Popular Education ERP Platform\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website\",\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/\",\"name\":\"Best ERP Software, Vendors, News and Reviews\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546\",\"name\":\"Elizabeth Quirk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g\",\"caption\":\"Elizabeth Quirk\"},\"description\":\"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com\",\"sameAs\":[\"https:\/\/x.com\/Worktech_Review\"],\"url\":\"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Examining the Cyberattack on Popular Education ERP Platform","description":"In this post, we discuss a little of what happened with the cyberattack on Ellucian\u2019s popular education ERP platform and how to avoid these situations.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/","og_locale":"en_US","og_type":"article","og_title":"Examining the Cyberattack on Popular Education ERP Platform","og_description":"In this post, we discuss a little of what happened with the cyberattack on Ellucian\u2019s popular education ERP platform and how to avoid these situations.","og_url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/","og_site_name":"Best ERP Software, Vendors, News and Reviews","article_published_time":"2019-08-16T12:32:39+00:00","article_modified_time":"2022-07-06T18:45:29+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg","type":"image\/jpeg"}],"author":"Elizabeth Quirk","twitter_card":"summary_large_image","twitter_creator":"@Worktech_Review","twitter_misc":{"Written by":"Elizabeth Quirk","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/","name":"Examining the Cyberattack on Popular Education ERP Platform","isPartOf":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg","datePublished":"2019-08-16T12:32:39+00:00","dateModified":"2022-07-06T18:45:29+00:00","author":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546"},"description":"In this post, we discuss a little of what happened with the cyberattack on Ellucian\u2019s popular education ERP platform and how to avoid these situations.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#primaryimage","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg","contentUrl":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/files\/2019\/08\/Security-threat.jpg","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/examining-the-cyberattack-on-popular-education-erp-platform\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/"},{"@type":"ListItem","position":2,"name":"Examining the Cyberattack on Popular Education ERP Platform"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#website","url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/","name":"Best ERP Software, Vendors, News and Reviews","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/feeeb7918882f3214ef325bc102b4546","name":"Elizabeth Quirk","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/57b5a4f7ddeacb3c21ec36e60492a204?s=96&d=mm&r=g","caption":"Elizabeth Quirk"},"description":"Liz is a leading enterprise technology writer covering Enterprise Resource Planning (ERP), Business Process Management (BPM) and Talent Management Suites (TMS) at Solutions Review. She writes to bridge the gap between consumer and technical expert to help readers understand what they're looking for. Liz attended Massachusetts College of Liberal Arts, where she obtained her Bachelor of Arts Degree in English and Communications. You can reach her at equirk@solutionsreview.com","sameAs":["https:\/\/x.com\/Worktech_Review"],"url":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/author\/equirk\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/2367"}],"collection":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/users\/34"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/comments?post=2367"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/posts\/2367\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media\/4692"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/media?parent=2367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/categories?post=2367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/enterprise-resource-planning\/wp-json\/wp\/v2\/tags?post=2367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}