Israeli Government Websites Lack Basic Email Security
Translated & summarized from Haaretz by baba
Israeli government websites, including those of the Interior and Health ministries, are missing basic email security protections. A security researcher initially suspected a Mossad email breach after receiving suspicious emails, but it was determined that unauthenticated emails were not being blocked due to a lack of enforcement of basic security measures.
The story in 4 lines · by baba
- Israeli government websites for the Interior and Health ministries lack basic email security.
- Cyber experts' advice to verify official emails may be ineffective due to these vulnerabilities.
- A security researcher suspected a Mossad email breach after receiving spoofed emails.
- The issue stems from a failure to enforce basic protections against unauthenticated emails.
Cyber experts advise citizens to verify official email addresses to avoid scams, but a vulnerability discovered on government websites indicates this advice may not always be effective. Websites for the Ministry of Interior, Ministry of Health, and others were found to be lacking basic security protections.
A serious suspicion of takeover of the Mossad's email accounts arose last Monday when a well-known security researcher published that he had received emails from addresses belonging to the organization. The researcher, who manages the vx-underground website, which aggregates malware code for research purposes, found no evidence of spoofing, increasing suspicions of a breach. Fortunately, contrary to his initial assessment, no one had breached the Mossad's servers. The concerning news is that evidence of forgery or breach was not found because basic protections that should block unauthenticated emails were not enforced.
Not the same event — other stories that share this one’s people, places, or theme: background, reactions, and follow-ups.
