Hackers Get to NASA-Run Websites

Hackers Get to NASA-Run Websites

The internet sites of NASA's Instrument Systems and Technology unit and Software Engineering division need IT Support as they were broken into and screenshots illustrating the hack posted online. Hackers took advantage of weak IT security to hack into two NASA-run websites over the weekend.


Hackers appear to have taken advantage of SQL Injection flaws and poor access controls in mounting the attack, reports Gunter Ollmann, an ex-IBM IT engineer who is now VP of Research at security IT company Damballa. Obfuscated screenshots from the hack were subsequently posted onto a full disclosure mailing list.