{"id":57088,"date":"2024-09-12T14:11:49","date_gmt":"2024-09-12T14:11:49","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/36327\/Gallup-Cross-Site-Scripting-Error-Could-Have-Led-To-Data-Theft.html"},"modified":"2024-09-12T14:11:49","modified_gmt":"2024-09-12T14:11:49","slug":"gallup-cross-site-scripting-error-could-have-led-to-data-theft","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/","title":{"rendered":"Gallup Cross Site Scripting Error Could Have Led To Data Theft"},"content":{"rendered":"
<\/div>\n

Gallup has fixed two cross-site scripting (XSS) errors on its website that could have enabled data theft and account takeover, according to a report published by Checkmarx<\/a> on Tuesday.<\/p>\n

The two flaws were due to lack of proper sanitization or encoding of certain query string parameters at certain Gallup endpoints, which an attacker could have exploited by appending their own values to the ends of otherwise-legitimate Gallup domain URLs and convincing victims to click the manipulated links.<\/p>\n

In proof-of-concept (PoC) videos, the researchers showed how one of the vulnerabilities could extract information from an unauthenticated victim during the checkout process on the Gallup online store, and how another could be used to perform actions on behalf of a logged-in victim, ultimately resulting in a takeover of their Gallup account.<\/p>\n

\u201cWith XSS seemingly everywhere it is more important than ever to teach the secure coding basics of always encoding output in a web application. XSS is easy to learn to prevent, easy to scan code for, and easy to fix but you need awareness to get started on the journey of squashing this bug class for all of your web apps,\u201d Chris Wysopal, chief technology officer and founder of Veracode, told SC Media.<\/p>\n

Both XSS errors were reported to Gallup\u2019s incident response team by Checkmarx on June 23 and confirmed to be fully fixed by July 11. There is no indication that these flaws were ever exploited in the wild.<\/p>\n

Gallup\u2019s credibility can be leveraged for social engineering<\/h2>\n

Gallup is a well-known for its public opinion polls, including polls involving U.S. politics and elections. An attacker could have leveraged the XSS flaws involving Gallup\u2019s gx.gallup.com and my.gallup.com domains to convince victims to click links that came from the legitimate gallup.com website but ultimately led to data extraction or session hijacking by an attacker.<\/p>\n

The first flaw, which Checkmarx gave a CVSS score of 6.5, is an example of reflected cross scripting, in which data from an HTTP request is unsafely included directly in its response.<\/p>\n

Due to failure of the \/kiosk.gx endpoint to sanitize or encode the query string of the ALIAS parameter before including it on the webpage, an attacker could craft a parameter value that leads to arbitrary code execution in the context of the victim\u2019s navigation session if the victim clicks the link, the Checkmarx researchers wrote.<\/p>\n

The PoC exploit demonstrated by the researchers involves the attacker asking the victim to participate in a survey by clicking the link, which has a gx.gallup.com domain, a domain commonly used to access surveys on the Gallup website. The victim does not need to be logged in for this attack to be successful.<\/p>\n

When the victim clicks the link, due to the crafted query string appended to it, the victim\u2019s browser loads a JavaScript file from an attacker-controlled domain, which then leverages a JSONP endpoint on the Gallup website to exfiltrate Digital River API access tokens from the victim\u2019s session. Digital River is the e-commerce service used by Gallup to process information from purchases made from its online shop.<\/p>\n

Information submitted by the user in the process of making a purchase, such as their name, address and payment information, could be accessed using the extracted tokens \u2013 the attacker could also leverage these tokens to add new products to the victim\u2019s Gallup shopping cart.<\/p>\n

The second flaw involves Document Object Model (DOM)-based XSS, in which data from untrusted sources is unsafely processed by the client-side JavaScript, which writes this untrusted data back to the DOM, according to Checkmarx.<\/p>\n

This flaw, given a CVSS score of 5.4, could lead to account takeover due to failure of the \/_Portal\/ApplicationAsync endpoint to sanitize or encode the query string searchTerm parameter value prior to including it on the webpage, the researchers wrote. Like the previous flaw, if an attacker crafts their own malicious query string and sends it in a phishing link to the victim, a Javascript file is retrieved from an attacker-controlled domain and executed in the context of the victim\u2019s navigation session.<\/p>\n

In this case, the phishing link comes from the my.gallup.com domain and the malicious JavaScript automatically changes the victim\u2019s account email address to the attacker\u2019s own email, allowing them to take over the account using the reset password function. The victim must be logged into their account when they click the link for this attack to work.<\/p>\n

The importance of combatting XSS vulnerabilities<\/h2>\n

The ability for an attacker to leverage legitimate Gallup domains and take over Gallup user accounts, in addition to data and privacy concerns, can also raise concerns regarding disinformation<\/a>, especially in the lead up to the 2024 presidential election, according to Checkmarx and Veracode.<\/p>\n

Given these concerns, resilience against XSS vulnerabilities is crucial for sites like Gallup and other web applications involved in collecting or reporting information about politics, social issues and the election. However, Wysopal told SC Media that XSS flaws are found in about half of all applications scanned by Veracode<\/a>.  <\/p>\n

\u201cWhen we find them in an application, we often find upwards of 100 instances of XSS,\u201d Wysopal said.<\/p>\n

Checkmarx says applications should properly encode data prior to including it in response markups or DOMs, in order to prevent XSS attacks similar to those demonstrated in its PoCs. Content Security Policies (CSPs), which restrict the locations from which browsers can retrieve and execute scripts, can also help combat XSS, Checkmarx noted.  <\/p>\n

\u201cThankfully in 2024 we also have GenAI powered auto-remediation,\u201d Wysopal added.<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":57089,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[5790],"class_list":["post-57088","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlineprivacydata-lossflaw"],"yoast_head":"\nGallup Cross Site Scripting Error Could Have Led To Data Theft 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Gallup Cross Site Scripting Error Could Have Led To Data Theft 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2024-09-12T14:11:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/files.scmagazine.com\/wp-content\/uploads\/2024\/09\/AdobeStock_624674034.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Gallup Cross Site Scripting Error Could Have Led To Data Theft\",\"datePublished\":\"2024-09-12T14:11:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/\"},\"wordCount\":937,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg\",\"keywords\":[\"headline,privacy,data loss,flaw\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/\",\"name\":\"Gallup Cross Site Scripting Error Could Have Led To Data Theft 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg\",\"datePublished\":\"2024-09-12T14:11:49+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/09\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg\",\"width\":800,\"height\":450},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,privacy,data loss,flaw\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlineprivacydata-lossflaw\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Gallup Cross Site Scripting Error Could Have Led To Data Theft\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Gallup Cross Site Scripting Error Could Have Led To Data Theft 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/","og_locale":"en_US","og_type":"article","og_title":"Gallup Cross Site Scripting Error Could Have Led To Data Theft 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2024-09-12T14:11:49+00:00","og_image":[{"url":"https:\/\/files.scmagazine.com\/wp-content\/uploads\/2024\/09\/AdobeStock_624674034.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Gallup Cross Site Scripting Error Could Have Led To Data Theft","datePublished":"2024-09-12T14:11:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/"},"wordCount":937,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/09\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg","keywords":["headline,privacy,data loss,flaw"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/","url":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/","name":"Gallup Cross Site Scripting Error Could Have Led To Data Theft 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/09\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg","datePublished":"2024-09-12T14:11:49+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/09\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/09\/gallup-cross-site-scripting-error-could-have-led-to-data-theft.jpg","width":800,"height":450},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/gallup-cross-site-scripting-error-could-have-led-to-data-theft\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,privacy,data loss,flaw","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlineprivacydata-lossflaw\/"},{"@type":"ListItem","position":3,"name":"Gallup Cross Site Scripting Error Could Have Led To Data Theft"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57088","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=57088"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57088\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/57089"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=57088"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=57088"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=57088"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}