In 2019, the online training platform Skillbox sent a rogue print job to unsecured network printers. To do that, they relied on a search tool called Shodan that discovers vulnerable Internet-connected devices. It was the very same tool that a prankster known as HackerGiraffe had used to hijack 50,000 network printers a few months earlier.
Both HackerGiraffe and Skillbox used Shodan for benign purposes. One was to promote a YouTube channel. The other was to print out flyers for a new design course. But, what’s worrying is that they were able to breach the defenses of security-conscious organizations.
Every few months, an equally high-profile—and much more serious—cyberattack makes headlines. This serves as an urgent reminder to federal governments and their agencies to reinforce their security infrastructures.
Often, government printing and print management are forgotten in that process. A Spiceworks study found that just 22% of organizations actively monitor their printer syslogs. Furthermore, only 13% integrate their printers into security information and event management (SIEM) tools. A 2019 Quocirca Global Print Security report found that nearly 60% of organizations had suffered a print-related data loss in the past year.
What explains that mismatch? Why are the vulnerabilities of printers and print management software frequently overlooked? And more importantly, what can federal IT officials do to fix things?