{"id":2371,"date":"2018-12-20T13:13:32","date_gmt":"2018-12-20T17:13:32","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=2371"},"modified":"2018-12-20T13:13:32","modified_gmt":"2018-12-20T17:13:32","slug":"experts-weigh-recent-nasa-data-breach","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/","title":{"rendered":"Security Experts Weigh In: The Recent NASA Data Breach"},"content":{"rendered":"

\"Security<\/p>\n

As cybersecurity experts reel from the deluge of data breach headlines as the holidays close in, it can be easy to miss some of them. Such is the case with the NASA breach, which was disclosed in an internal memo yesterday.\u00a0 \u00a0<\/span><\/p>\n

\t\t\t

<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Much of the breach’s details have not yet been determined. We had a few cybersecurity experts weigh in on the breach and what it means for identity and access management and SIEM<\/a>. Here\u2019s what we learned: \u00a0\u00a0<\/span><\/p>\n

Michael Magrath, Director, Global Regulations & Standards, <\/b>OneSpan<\/b><\/a><\/span><\/h3>\n

Those affected by the NASA breach were likely impacted by the previous NASA breaches, the 2015 Office of Personnel Management breach that affected 21.5 million federal employees and contractors and if they transferred to DoD since onboarding with NASA they could have been victims of the DoD breach reported a few weeks ago. \u00a0<\/span><\/p>\n

An \u201cagency breach trifecta.\u201d Their personally identifiable information is already on the Dark Web, available for sale. In addition to Christmas cards in their mailbox, NASA employees will receive their breach notification letter which will include the usual standard operating procedure of free credit monitoring.<\/span><\/p>\n

There have been discussions in Washington about implementing data protection regulations similar to the EU\u2019s General Data Protection Regulation in the United States. It is well past the time to better protect consumers and employees in cyberspace. If the U.S. moves forward with GDPR-like regulations it is critical that any regulation implemented does not exclude the federal government and its employees and contractors.<\/span><\/p>\n

Stephan Chenette, CTO and Co-Founder,<\/b> AttackIQ<\/b><\/a><\/span><\/h3>\n

This is not the first time we have seen NASA suffer a security breach. In 2011, the agency admitted to 13 separate major network breaches, and in 2016 we saw another major hack compromise NASA employee data, flight logs and videos, and the intruders were even able to alter the path of one of NASA\u2019s drones. Now NASA\u2019s current and former employees have had their personally identifiable information compromised, including Social Security numbers, exposing those affected to further instances of fraud and data leaks through other vectors. <\/span><\/p>\n

Earlier this year, NASA received more than $20 billion for its fiscal year 2018 budget, its best budget since 2009. After multiple serious security incidents, the agency needs to reevaluate the funds and resources it is dedicating toward cybersecurity and adopt solutions that provide visibility<\/a> into their cyber readiness on a continuous basis to ensure that its systems are operating as intended and defending the organization\u2019s data. A more robust solution will give NASA\u2019s executive team the confidence that their operations will not be interrupted by a security breach, thus saving time, money, intellectual property and more.<\/span><\/p>\n

Jacob Serpa, Product Marketing Manager,<\/b> Bitglass<\/b><\/a><\/span><\/h3>\n

The scope of this breach is still unknown; however, NASA has more than 17,000 employees (and more former employees) who may have been affected. While NASA confirmed that it was working with federal authorities to investigate the breach, waiting two months to notify employees is quite negligent \u2013 particularly in light of the fact that Social Security numbers were exposed. Obviously, the best case scenario is to avoid breaches altogether; however, if one does occur, proper steps must be taken to mitigate damage and communicate with affected stakeholders in a timely manner.<\/span><\/p>\n

To prevent unauthorized access to sensitive data, organizations must adopt robust, flexible, and proactive cybersecurity platforms. These platforms must include identity and access management capabilities for verifying users\u2019 identities, detecting potential intrusions, and enforcing step-up, multi-factor authentication in real time.<\/span><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

As cybersecurity experts reel from the deluge of data breach headlines as the holidays close in, it can be easy to miss some of them. Such is the case with the NASA breach, which was disclosed in an internal memo yesterday.\u00a0 \u00a0 Much of the breach’s details have not yet been determined. We had a […]<\/p>\n","protected":false},"author":41,"featured_media":2178,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[353,95,338,145,112,86,950,21,57,22],"acf":[],"yoast_head":"\nSecurity Experts Weigh In: The Recent NASA Data Breach<\/title>\n<meta name=\"description\" content=\"We had a few cybersecurity experts weigh in on the most recent NASA breach. Here\u2019s what your enterprise can learn from them.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Experts Weigh In: The Recent NASA Data Breach\" \/>\n<meta property=\"og:description\" content=\"We had a few cybersecurity experts weigh in on the most recent NASA breach. Here\u2019s what your enterprise can learn from them.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2018-12-20T17:13:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/\",\"name\":\"Security Experts Weigh In: The Recent NASA Data Breach\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg\",\"datePublished\":\"2018-12-20T17:13:32+00:00\",\"dateModified\":\"2018-12-20T17:13:32+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"We had a few cybersecurity experts weigh in on the most recent NASA breach. Here\u2019s what your enterprise can learn from them.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Cybersecurity Awareness Month 2020: Expert Commentary\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security Experts Weigh In: The Recent NASA Data Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security Experts Weigh In: The Recent NASA Data Breach","description":"We had a few cybersecurity experts weigh in on the most recent NASA breach. Here\u2019s what your enterprise can learn from them.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/","og_locale":"en_US","og_type":"article","og_title":"Security Experts Weigh In: The Recent NASA Data Breach","og_description":"We had a few cybersecurity experts weigh in on the most recent NASA breach. Here\u2019s what your enterprise can learn from them.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2018-12-20T17:13:32+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/","name":"Security Experts Weigh In: The Recent NASA Data Breach","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg","datePublished":"2018-12-20T17:13:32+00:00","dateModified":"2018-12-20T17:13:32+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"We had a few cybersecurity experts weigh in on the most recent NASA breach. Here\u2019s what your enterprise can learn from them.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/09\/business-316906_960_720-mod.jpg","width":800,"height":400,"caption":"Cybersecurity Awareness Month 2020: Expert Commentary"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/experts-weigh-recent-nasa-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Security Experts Weigh In: The Recent NASA Data Breach"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2371"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=2371"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2371\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2178"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=2371"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=2371"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=2371"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}