Imperva Discloses Security Incident Affecting Cloud WAF Customers

guest · Aug 27, 2019

Imperva Discloses Security Incident Affecting Cloud WAF Customers
August 27, 2019
https://www.bleepingcomputer.com/ne...urity-incident-affecting-cloud-waf-customers/

Cyber security firm Imperva disclosed today a security incident that led to data exposure affecting a subset of customers using its Cloud Web Application Firewall (WAF) product, previously known as Incapsula.

Imperva's Cloud WAF is a managed service designed to protect cloud services "against known and unknown threats, including all OWASP top 10 and zero-day threats."
Only a subset of Cloud WAF (Incapsula) customers affected
The security breach was discovered on August 20, 2019, after a third party reported the data exposure affecting some Cloud WAF customers with accounts through September 15, 2017.

"Elements of our Incapsula customer database through September 15, 2017" were also exposed according to Hylen, including customer email addresses together with hashed and salted passwords.
Click to expand...

Imperva: Imperva Security Update

ronjor · Aug 27, 2019

Cybersecurity Firm Imperva Discloses Breach

Imperva, a leading provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users.
Redwood Shores, Calif.-based Imperva sells technology and services designed to detect and block various types of malicious Web traffic, from denial-of-service attacks to digital probes aimed at undermining the security of Web-based software applications.
Click to expand...

guest · Oct 10, 2019

Imperva blames data breach on stolen AWS API key
Imperva said it accidentally exposed an internal server from where a hacker stole an AWS API key
October 10, 2019
https://www.zdnet.com/article/imperva-blames-data-breach-on-stolen-aws-api-key/

Cyber-security firm Imperva published today a detailed post-mortem report of a security breach the company disclosed two months ago, in August.

The post-mortem is a little bit convoluted, but we summarized the series of events that led to the Imperva breach in the list below: [...]
Imperva didn't provide exact dates for the events listed above, so we don't yet know for how much time the hacker had access Imperva's servers.
In its August blog post, Imperva also didn't say how many users were impacted, but today, Hylen provided a rough estimate.

Nonetheless, the company now joins a long list of companies that had customer data stolen because of accidental exposures of internal systems on the internet.
Click to expand...

Imperva: Imperva Security Update (October 10, 2019)

guest · Oct 30, 2019

Imperva CEO Chris Hylen Steps Down In Wake Of Data Breach: Report
October 29, 2019
https://www.crn.com/news/security/imperva-ceo-chris-hylen-steps-down-in-wake-of-data-breach-report

Imperva CEO Chris Hylen resigned from the company following a data breach that exposed personal information for some web application firewall (WAF) users, according to a Calcalist report.
The Redwood Shores, Calif.-based cybersecurity vendor confirmed Hylen’s departure to Israeli business news publication Calcalist on Monday.

“Chris Hylen has stepped down from his role as Chief Executive Officer effective October 21,” an Imperva spokesperson told Calcalist in an email. “This decision was made mutually by Mr. Hylen and the Thoma Bravo board. Imperva Chairman Charles Goodman will step in as interim CEO while a search is underway for a new permanent CEO to lead Imperva.”
Click to expand...

Log in or Sign up

Imperva Discloses Security Incident Affecting Cloud WAF Customers

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Log in or Sign up

Imperva Discloses Security Incident Affecting Cloud WAF Customers

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Useful Searches