Security breach on government website: Official state email vulnerable to impersonation
A new report reveals that the Israeli government website, gov.il, still does not properly protect official emails sent on its behalf. This is a technical issue that allows hostile actors or scammers to send emails that appear to originate from government ministries, which could mislead many citizens.
The core problem is the lack of basic technological protection that verifies the sender's identity. Although the issue was raised for discussion nine years ago, it appears that government systems have yet to be updated to prevent the possibility of spoofing official email addresses. Information security experts warn that this poses a significant risk to the public's data security.
Impersonating government ministries is a common tool among cybercriminals attempting to steal personal details, ID numbers, or credit card information. When an email looks official and comes from a recognized government address, citizens tend to trust it more, which increases the likelihood of such scams succeeding.
The National Cyber Directorate and the relevant government ministries have yet to fully respond to the delay in addressing the vulnerability. However, experts recommend that the public remain highly vigilant: carefully check the content of messages, avoid clicking on suspicious links, and remember that government ministries generally do not request sensitive details via email.
This current exposure raises difficult questions regarding the prioritization of information security in Israel's public systems. In a world where cyber threats are becoming more sophisticated by the day, protecting digital communication between the state and the citizen is an essential step in maintaining public trust.