SCORM Cloud Security Incident

Incident Report for SCORM Cloud

Resolved

At 7:16 AM CST, we received a notification from our intrusion detection system that a subset of SCORM Cloud's application servers had a cryptocurrency miner installed by way of a remote code execution exploit in one of our application dependencies. Analysis of system logs and application binaries has revealed that no company or customer data was compromised during this incident. The vulnerability has been patched and all affected systems have been terminated.

Posted Apr 20, 2018 - 18:59 UTC