{"id":4609,"date":"2019-10-28T12:57:00","date_gmt":"2019-10-28T16:57:00","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4609"},"modified":"2019-10-28T12:57:00","modified_gmt":"2019-10-28T16:57:00","slug":"everything-you-need-to-know-about-the-adobe-data-exposure","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/","title":{"rendered":"Everything You Need to Know About The Adobe Data Exposure"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-3663\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg\" alt=\"Everything You Need to Know About The Adobe Data Exposure \" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod-300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod-768x384.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod-540x270.jpg 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod-162x81.jpg 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod-360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">On Friday of last week, software giant Adobe announced a significant data exposure; nearly 7.5 million users of their Creative Cloud service suffered from an unsecured server.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Security researcher Bob Diachenko, working alongside Comparitech, discovered the unsecured ElasticSearch server which proved accessible to the web; in fact, the server did not possess any password or authentication requirements of any kind. They made their discovery on October 19.\u00a0<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" alt=\"Download Link to Privileged Access Management Buyer's Guide\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Adobe closed the exposed server immediately on receiving the alert from Mr. Diachenko and Comparitech. Then the software company released a <\/span><a href=\"https:\/\/theblog.adobe.com\/security-update\/\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400\">statement<\/span><\/a><span style=\"font-weight: 400\"> on the data exposure.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cLate last week, Adobe became aware of a vulnerability related to work on one of our prototype environments. We promptly shut down the misconfigured environment, addressing the vulnerability.\u201d<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-identity-and-access-management-software-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">exposed data<\/a> included email addresses, account creation dates, subscribes products, subscription records, payment records, and member IDs. However, Adobe stressed the exposed information did not contain passwords or financial information. Also, the exposure did not affect Adobe products or services.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">According to reports, The Adobe Creative Cloud estimated subscriber base numbers at 15 million. Of course, this indicates at least half of all Creative Cloud users suffered in this data exposure.\u00a0<\/span><\/p>\n<h2 style=\"text-align: justify\"><b>What the Abode Data Exposure Means for Enterprises<\/b><\/h2>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Paul Bischoff, privacy advocate for Comparitech, wrote on the Adobe exposure. \u201cThe information exposed in this leak could be used against Adobe Creative Cloud users in targeted phishing emails and scams. Fraudsters could pose as Adobe or a related company and trick users into giving up further info, such as passwords, for example.\u201d<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Additionally, Alexander Garc\u00eda-Tobar, CEO and Co-Founder<\/span><span style=\"font-weight: 400\"> of<\/span><a href=\"https:\/\/www.valimail.com\/\" target=\"_blank\" rel=\"noopener noreferrer\"> <span style=\"font-weight: 400\">Valimail<\/span><\/a><span style=\"font-weight: 400\">, shared his thoughts on the breach. \u201cPhishing campaigns often follow hot on the heels of breaches like this, targeting the victims with fake security warnings that look like they came from the breached company.\u201d\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cIn fact, 83 percent of phishing emails overall are brand or company impersonations. CISOs and CIOs face a daunting task against a relentless wave of impersonation attacks. Sender identity-based email security solutions are a powerful defense that can help stem these attacks.\u201d<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In addition to email security to prevent phishing attacks, enterprises need to consider preventative identity and access management. First, your enterprise must improve its visibility over all of your databases. Incidents like the Adobe exposure often result in databases becoming blindspots in your network. These blind spots do not receive adequate identity protections because they remain obscured from view. Obviously, your enterprise can\u2019t allow this to happen.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Additionally, multifactor authentication (MFA) can help protect your databases from exposure. MFA helps enterprises move beyond legacy password protections, layering defenses against malicious access requests. Every additional authentication factor\u2014including time of access request monitoring, geofencing, and biometric authentication\u2014increases the security of your databases.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Of course, hackers could attempt to subvert your MFA; however, it also deters most hackers away. Why would they waste their malicious time when easier enterprise targets exist?\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>How to Learn More<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Be sure to check out our <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-identity-and-access-management-software-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">2019 Identity Management Buyer\u2019s Guide<\/a> for more on multifactor authentication and identity solutions. We cover key solution providers and their key capabilities.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\"><br \/>Widget not in any sidebars<br \/><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On Friday of last week, software giant Adobe announced a significant data exposure; nearly 7.5 million users of their Creative Cloud service suffered from an unsecured server.\u00a0 Security researcher Bob Diachenko, working alongside Comparitech, discovered the unsecured ElasticSearch server which proved accessible to the web; in fact, the server did not possess any password or [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":3663,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,1267,1269,1268,125,16,112,76,145,30,91],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Everything You Need to Know About The Adobe Data Exposure<\/title>\n<meta name=\"description\" content=\"On Friday of last week, software giant Adobe announced a significant data exposure; nearly 7.5 million users of their Creative Cloud service.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/\",\"name\":\"Everything You Need to Know About The Adobe Data Exposure\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg\",\"datePublished\":\"2019-10-28T16:57:00+00:00\",\"dateModified\":\"2019-10-28T16:57:00+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"On Friday of last week, software giant Adobe announced a significant data exposure; nearly 7.5 million users of their Creative Cloud service.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Nintendo Breach: What to Know and Expert Commentary\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Everything You Need to Know About The Adobe Data Exposure\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Everything You Need to Know About The Adobe Data Exposure","description":"On Friday of last week, software giant Adobe announced a significant data exposure; nearly 7.5 million users of their Creative Cloud service.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/","url":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/","name":"Everything You Need to Know About The Adobe Data Exposure","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg","datePublished":"2019-10-28T16:57:00+00:00","dateModified":"2019-10-28T16:57:00+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"On Friday of last week, software giant Adobe announced a significant data exposure; nearly 7.5 million users of their Creative Cloud service.\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/11\/Dark-web-mod.jpg","width":800,"height":400,"caption":"Nintendo Breach: What to Know and Expert Commentary"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/everything-you-need-to-know-about-the-adobe-data-exposure\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Everything You Need to Know About The Adobe Data Exposure"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4609"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4609"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4609\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/3663"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}