Jason Parker (he/they)I finally made a list of all of my govtech vulnerabilities. Seeing it all broken out like this makes it feel so...real.
21 platforms, 18 of them are courts.
@infosec_jcp ππ done differentlyOoo, does this include Malware being served from .org sites that are PD? π€
@infosec_jcp No, that one is a CVSS 10 that basically lets you take full admin, including editing queries and DB connection strings. In theory, I suppose you could inject some JS into the output of officer complaints?
Yikes(!) That would be terrible for a form online from citizens making reports!
The difference in the City here vs. The South Bay PD systems online on VirusTotal is night and day, Malware infested vs. zero Malware detected in forms. π―β οΈπ
https://infosec.exchange/@infosec_jcp/109487605914643315
@infosec_jcp ππ done differently (@[email protected])
Attached: 1 image Follow up from a past scan on https://sjpd.org Still ββ£οΈββ£οΈββ£οΈ but believe I.T. or Not... This is BETTER than I.T. was. ππ³π€¨ #SJPD #VirusTotal #infosec https://www.virustotal.com/graph/embed/g98f85cfb01464fa09fd96259a7b7275cf7ba6da5fab9430786408fbc8213dda6
Hmm, it's gotten *better*, iGuess
β£οΈ πδΉ[αΛ΅βΎΛ΅α]γπ β£οΈ
β£οΈπ https://sjpd.org/ πβ£οΈ Last Scanned 11 months ago. Refreshed today though π―πβ£οΈππ§Ύπβ οΈ
