Breaches and incidents

Universitaet Bremen: zero-day attack on decentralised university systems

The university said on 22 Sep it was the target of a cyberattack that “war eine solche Zero-Day-Attacke” against decentralised facilities.

Disclosed
Verification
Checked against a primary source

What happened

  • The university said on 22 Sep it was the target of a cyberattack that “war eine solche Zero-Day-Attacke” against decentralised facilities; central services were not affected and “Studierendendaten sind zu keinem Zeitpunkt abgeflossen”.
  • Root cause: exploitation of a zero-day vulnerability (per the university); the product was not named.
  • No attacker named; the university places it in a worldwide wave of attacks on institutions.
  • Affected systems were taken offline immediately and the vulnerability closed.