Second-hand VPN leads to security breach at council
By Nicole Kobie,
A VPN server bought for 99 pence on eBay automatically connected itself to a council's private networks, according to a report from the BBC.
Security professional Andrew Mason, who works at Random Storm, picked up the Cisco Virtual Private Network (VPN) server for under a pound from the auction site in August. When he plugged the device in, it automatically connected itself to the last place it was pointed – straight to Kirklees Council's servers – complete with passwords.
"It is like having a long ethernet cable from the council office to anywhere where I connected the device," said Mason told the BBC.
The IP address was found to be owned by Capgemini, a managed services company which provided networking to the council until 2005. The device was sold online by Manga-Fu, which sells second-hand IT equipment.
A Kirklees Council spokesperson said it was concerned by the report, but confident that “multiple layers of security” prevented access to data. "In the meantime the disposal process has been suspended until an investigation can be carried out and appropriate action taken."
Related Tags
advertisement
Latest Security Features
Who should be Britain’s cyber security czar?
Experts reveal what a UK head of cyber security would need to do, while we put forward possible candidates for the role.
- The reality of movie technology
- Do smartphones need security software?
- Protecting the London 2012 Olympic Games
- Focus on... Flexible working
- Cyber policing and surveillance in Britain today
- How an FBI agent transformed Microsoft security
- Can security concerns kill cloud computing?
- GhostNet: Did the Chinese government hack the world?
- How poor web security nearly lead to a jail term
Latest Security Reviews
HP BladeSystem c3000 review: blade server
Rating: ![]()
- CA ARCserve Backup r12.5 review
- FaceTime Communications USG530 - web filtering appliance review
- Guardium 7 – database security review
- Google Apps Premier Edition
- SmoothWall UTM-1000 review
- Lenovo ThinkPad USB Portable Secure Hard Drive
- LogRhythm LR-500-XM review
- EXCLUSIVE - eSoft ThreatWall 250
- Zebra RZ400 - RFID Printer
advertisement
Latest News Videos in Security
Video: Mobile security threats and Mac complacency
Part two: Eugene Kaspersky, chief executive and founder of Kaspersky Lab, talks about the increasing security threats mobile users are facing.
Whitepapers
Want more background on today's hottest IT trends?
Visit IT PRO's whitepaper library for more on virtualisation, encryption and other topics.
Register for IT PRO
You'll get exclusive member benefits including free whitepapers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.



Social Bookmark this article: What is this?