A hacker has posted all the web vulnerabilities they could find on the UN website.  All the details are on pastebin (complete with f-bombs):  http://pastebin.com/ZB4eLVeS.  This episode is another reminder that web security is essential:

"It's web security 101," Aaron Titus, Chief Privacy Officer for Identity Finder says. "This breach seems to be a very simple attack. If this breach was real, they could have prevented this very easily and should have prevented it."

Though we have no evidence, its a safe bet that the UN had IPS, network firewalls and possibly so-called "next gen" firewalls which are virtually useless.  Its amazing that so many security professionals still can't distinguish between application layer vulnerabilities and perimeter protections.

Note that the hacker used Blind SQL injections, something we detailed on February 2nd.