The European Space Agency got hacked. The reason why is embarrassingly preventable.
Key takeaways
- ESA confirmed a breach of its unclassified science servers, with a hacker now offering stolen data for sale online
- Stolen material includes source code, API tokens, system config files, and hardcoded credentials embedded in the codebase
- Subsystem requirements for the Ariel exoplanet mission are among the potentially stolen documents
- Hardcoded passwords are one of the most preventable failure modes in security, yet they appear in enterprise codebases routinely