Cyber Risks · Cisco Talos

Efficiency? Security? When the quest for one grants neither.

Summary: Cisco Talos reported that the Doge.gov website was easily and immediately compromised, with researchers able to push updates to the public site via access to a database of government employment information. The DOGE team's Waste.gov site still carried a default WordPress Twenty Twenty-Four template, including sample text about an imaginary architecture firm called Études, and was hidden behind a password wall after the research became public.

Bottom line: A public government site was altered through access to a database of government employment information, and the fix was a password wall applied after the research was already public - the exposure happened before anyone noticed.

Read the original at Cisco Talos ↗

Topics
Malware
Related