Brian Krebs is a must-follow on Twitter. Krebs, an
independent investigative journalist who writes about computer
crime for his
website, and previously wrote for The Washington Post from
1995 to 2009, tweeted this over the weekend.
He went on to tweet that, of the 25,
two of the companies were payment who were pwned were payment card processors. Depending on
who the payment card processors are, and how much data was stolen,
this has the potential to be a very significant breach.
What is a ColdFusion Exploit?
The payment card processors were reportedly hacked using a
ColdFusion exploit. ColdFusion is an Adobe product, which is used
to develop web applications. It's used by a wide variety
of private companies and government agencies. It has 61 known vulnerabilities, which potentially
allow hackers to do a number of things, including a "zero-day" attack to steal passwords
and credit card information, or a wide ranging attack on U.S. Government sites in
