{"id":27042,"date":"2018-12-12T08:00:00","date_gmt":"2018-12-12T16:00:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/"},"modified":"2018-12-12T08:00:00","modified_gmt":"2018-12-12T16:00:00","slug":"usps-vulnerability-may-have-exposed-millions-of-users","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/","title":{"rendered":"USPS Vulnerability May Have Exposed Millions of Users"},"content":{"rendered":"<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignleft size-medium wp-image-8869\" src=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg\" alt=\"\" width=\"300\" height=\"225\" \/>Do you have an account on USPS.com?\u00a0 If so, you&#8217;re not alone.\u00a0 Tens of millions of Americans use it daily for a variety of purposes.\u00a0 Unfortunately, if you do have an account, it may have been compromised.<\/p>\n<p>Recently, the USPS announced the discovery of a critical security vulnerability that exposed the account information of more than sixty million customers to literally anyone with a USPS.com account.<\/p>\n<p>The flaw was discovered by a researcher who has chosen to keep his\/her identity a secret, but essentially worked like this:<\/p>\n<p>Any user logged into USPS.com could perform a search using any number of wildcard search parameters.\u00a0 Given that, any user could search for the details of literally any other user on the system and get them.\u00a0 Note that nearly any detail could be collected in this manner, including:<\/p>\n<ul>\n<li>User name<\/li>\n<li>Email address<\/li>\n<li>Mailing address<\/li>\n<li>Phone number<\/li>\n<li>Authorized users<\/li>\n<li>And more<\/li>\n<\/ul>\n<p>Worst of all, the process of obtaining all the data could easily be automated and simply left to run and collect.<\/p>\n<p><strong>Setu Kulkarni, the VP of Strategy and Business Development at WhiteHat Security had this to say about the flaw:<\/strong><\/p>\n<p>&#8220;APIs are turning out to be a double-edged sword when it comes to internet scale B2B connectivity and security.\u00a0 APIs, when insecure, break down the very premise of uber connectivity they have helped establish.<\/p>\n<p>To avoid similar flaws, government agencies and companies must be proactive, not just reactive, in regard to application security.\u00a0 Every business that handles consumer data needs to make security a consistent, top-of-mind concern with an obligation to perform the strictest security tests against vulnerable avenues:\u00a0 APIs, network connections, mobile apps, websites, and databases.\u00a0 Organizations that rely on digital platforms need to educate and empower developers to code using security best practices through the entire software lifecycle, with proper security training and certifications.&#8221;<\/p>\n<p>The worst part about this incident was the fact that the unnamed security researcher reported the issue to the post office over a year ago.\u00a0 It took that long for the agency to finally take action, and when they did, they were able to solve the problem in less than 48 hours.<\/p>\n<p>While it&#8217;s unknown if anyone took advantage of the flaw, there&#8217;s no sense taking chances.\u00a0 Assume the worst and act accordingly.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Do you have an account on USPS.com?\u00a0 If so, you&#8217;re not alone.\u00a0 Tens of millions of Americans use it daily for a variety of purposes.\u00a0 Unfortunately, if you do have an account, it may have been compromised. Recently, the USPS announced the discovery of a critical security vulnerability that exposed the account information of more [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.2 (Yoast SEO v22.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>USPS Vulnerability May Have Exposed Millions of Users<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"USPS Vulnerability May Have Exposed Millions of Users\" \/>\n<meta property=\"og:description\" content=\"Do you have an account on USPS.com?\u00a0 If so, you&#8217;re not alone.\u00a0 Tens of millions of Americans use it daily for a variety of purposes.\u00a0 Unfortunately, if you do have an account, it may have been compromised. Recently, the USPS announced the discovery of a critical security vulnerability that exposed the account information of more [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2018-12-12T16:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263\"},\"headline\":\"USPS Vulnerability May Have Exposed Millions of Users\",\"datePublished\":\"2018-12-12T16:00:00+00:00\",\"dateModified\":\"2018-12-12T16:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/\"},\"wordCount\":388,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/\",\"url\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/\",\"name\":\"USPS Vulnerability May Have Exposed Millions of Users\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg\",\"datePublished\":\"2018-12-12T16:00:00+00:00\",\"dateModified\":\"2018-12-12T16:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage\",\"url\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg\",\"contentUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"USPS Vulnerability May Have Exposed Millions of Users\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/grapevinemsp.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"USPS Vulnerability May Have Exposed Millions of Users","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/","og_locale":"en_US","og_type":"article","og_title":"USPS Vulnerability May Have Exposed Millions of Users","og_description":"Do you have an account on USPS.com?\u00a0 If so, you&#8217;re not alone.\u00a0 Tens of millions of Americans use it daily for a variety of purposes.\u00a0 Unfortunately, if you do have an account, it may have been compromised. Recently, the USPS announced the discovery of a critical security vulnerability that exposed the account information of more [&hellip;]","og_url":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2018-12-12T16:00:00+00:00","og_image":[{"url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/"},"author":{"name":"admin","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263"},"headline":"USPS Vulnerability May Have Exposed Millions of Users","datePublished":"2018-12-12T16:00:00+00:00","dateModified":"2018-12-12T16:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/"},"wordCount":388,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg","articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/","url":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/","name":"USPS Vulnerability May Have Exposed Millions of Users","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg","datePublished":"2018-12-12T16:00:00+00:00","dateModified":"2018-12-12T16:00:00+00:00","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#primaryimage","url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg","contentUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2018\/12\/usps-needs-resized-300x225.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/usps-vulnerability-may-have-exposed-millions-of-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"USPS Vulnerability May Have Exposed Millions of Users"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/137cfce8c359da44e4eec20870fe0263","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/506eb2602aaa2c305a9acb78a1919031?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/grapevinemsp.com"]}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/27042"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=27042"}],"version-history":[{"count":0,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/27042\/revisions"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=27042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=27042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=27042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}