Bottom line: The University of Munich's IT system was accessed by an attacker, potentially exposing student financial data.
What's happening: An attacker accessed enrollment data stored on one of its IT systems, which is managed by Oracle, between 1 January 2023 and 15 February 2023.
What to do: Implement multi-factor authentication (MFA) on all cloud-based services, including Oracle WebLogic Server, and conduct regular vulnerability assessments and penetration testing to identify and address potential weaknesses in their IT systems.