Virtual Event: Threat Detection and Incident Response Summit - Watch Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Incident Response

Report: Jet Propulsion Laboratory Hacked for 10 Months

A report says hackers stole data from NASA’s Jet Propulsion Laboratory in Southern California for nearly a year without being detected.

A report says hackers stole data from NASA’s Jet Propulsion Laboratory in Southern California for nearly a year without being detected.

NASA Jet Propulsion Laboratory hacked for 10 months

The Pasadena Star-News reports Friday that security weaknesses allowed hackers to steal 500 megabytes of data from 23 files, including two containing restricted information related to the Curiosity rover Mars mission.

A report this week from NASA’s Office of the Inspector General says hackers used a credit card-sized computer and a compromised external user account.

They operated for 10 months until the hack was discovered in April 2018.

As a result, NASA temporarily disconnected several space flight-related systems from JPL’s computer network.

The Star-News says hackers also broke into JPL in 2009, 2011, 2014, 2016 and 2017.

NASA recommended security fixes that should be completed over the next year.

Advertisement. Scroll to continue reading.

RelatedNASA’s Cybersecurity Program Gets Failing Grade

Related: Ex-NASA Contractor Pleads Guilty in Cyberstalking Scheme

Related: NASA Denies Drone Hack, Data Leak

Related: Exploit Payload Possibly Made It Onto NASA’s Orion Spacecraft

view counter

Written By

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.

Register

Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.

Register

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

Application Security

GitHub this week announced the revocation of three certificates used for the GitHub Desktop and Atom applications.

Data Breaches

GoTo said an unidentified threat actor stole encrypted backups and an encryption key for a portion of that data during a 2022 breach.

Incident Response

Microsoft has rolled out a preview version of Security Copilot, a ChatGPT-powered tool to help organizations automate cybersecurity tasks.

Incident Response

Meta has developed a ten-phase cyber kill chain model that it believes will be more inclusive and more effective than the existing range of...

Incident Response

Cygnvs emerges from stealth mode with an incident response platform and $55 million in Series A funding.

Artificial Intelligence

Two new surveys stress the need for automation and AI – but one survey raises the additional specter of the growing use of bring...