US visa system vulnerable to attack: report


By Dylan Bushell-Embling
Tuesday, 05 April, 2016


US visa system vulnerable to attack: report

Security experts have discovered vulnerabilities in the system used by the US State Department to store personal information from US passports and visas that could expose the sensitive records to theft or illegal modification.

The USA's ABC News has reported, citing political sources, that the Consular Consolidated Database (CCD) has been found to be at risk of being compromised.

The CCD is used as the core system for vetting travellers to and from the US. It stores the personal and biometric details of nearly everybody who has applied for a US passport or visa in the past 20 years, including fingerprints, photographs and social security numbers.

Such information could potentially be extremely valuable to cyberthieves, and the potential ability for attackers to insert or modify documents presents a host of national security concerns.

According to the report, terrorist groups like ISIS have previously expressed a desire to exploit the US visa system.

But a spokesperson for the State Department said the agency is working continuously to detect and close any possible vulnerability.

Several sources referenced in the report also expressed scepticism that cybercriminals or terrorists would even have the capability to exploit the vulnerabilities. There is no evidence that the system has been compromised.

Image courtesy of Tom Hughes-Croucher under CC

Related Articles

Why AI agents are a new insider threat for business

AI-powered insiders are non-human actors operating within the perimeter, inheriting trusted...

Securing SMB organisations: closing the cyber gap through culture

Limited budgets and resources mean SMBs cannot financially prioritise cybersecurity as much as...

The silent cyberthreat lurking in mismanaged tokens

It took years of painful breaches for organisations to recognise the importance of secure...


  • All content Copyright © 2025 Westwick-Farrow Pty Ltd