A hacker reported to X that he had breached NASA systems for the second time, exposing the agency to vulnerabilities security. According to his post, a few days later he received an official letter from NASA, in which the agency showed its appreciation and recognized his contribution in identifying vulnerabilities and protecting the organization's systems.
The letter was signed by Mark Witt, NASA's Chief Information Officer. The space agency acknowledged that the hacker's actions played a role in ensuring the "integrity and availability" of its IT infrastructure .
The post said: “I hacked @NASA (again) and reported some vulnerabilities to them. Just today, I received this letter of appreciation from them after they fixed the vulnerabilities!”
See also: US: Chinese hackers Salt Typhoon breached Internet service providers
The hacker was praised by the space agency for identifying and reporting vulnerabilities, according to NASA's Vulnerability Disclosure Policy (VDP). The hacker was also recognized as an "independent security researcher."
The Space Agency said it was able to preserve the “integrity and availability of NASA information” due to the awareness of the specific hacker.
The post on X has received hundreds of comments. One user wrote: “Congratulations! This is a huge feat for the resume — except it’s also very important to deter someone else with the same thought patterns and execution strategies. Maybe the other person wasn’t a white hat hacker!”
Another user commented: “Bravo to NASA for rewarding safety researchers (instead of punishing with legal action), it’s really only in their best interest. Congratulations to you too, good sir.”
See also: USA 2024: Data breaches at healthcare organizations affected over 14 million patients
This incident highlights the importance of responsible disclosure of security vulnerabilities. It is vital for organizations to implement processes that encourage hackers to report issues rather than exploit them for personal gain.
In recent years, ethical hacking has emerged as a profession, with individuals and companies offering their services to identify and address potential vulnerabilities in systems. This promotes a proactive approach to cybersecurity and helps prevent attacks before they happen.
See also: DOJ charges Chinese engineer with spear phishing against NASA
In an ever-evolving digital landscape, the fight against cyberattacks continues. It is important for all stakeholders to work together and prioritize cybersecurity to protect personal information and vital systems from potential harm. The recent NASA hack serves as a reminder of this ongoing battle and the need for constant vigilance to secure our digital world.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Source: www.ndtv.com
