On Thursday July 18 Microsoft cloud services were impacted globally due to a faulty CrowdStrike Falcon security agent installed on Microsoft cloud servers. Microsoft and Crowdstrike resolved this problem on Friday July 19th. Quandis uses Microsoft Azure for CI/CD, thus we were indirectly impacted as new code releases were delayed during that outage period. Quandis […]
Quandis is issuing an update on a security incident that impacted a Quandis business partner, First American. We want to assure our valued customers that the incident is isolated and has no effect on any of our products, except for Title Direct customers routing title orders to First American Title. On December 21, we were made […]
Quandis does not use Apache or Struts, and is not affected by the vulnerability announced in CVE-2023-50164 .
Quandis is issuing an update on a security incident that impacted a Quandis business partner, Fidelity National Financial (FNF). We want to assure our valued customers that the incident is isolated and has no effect on any of our products, except for Title Direct customers routing title orders to ServiceLink. On November 28, we were […]
In the wake of recent news highlighting national security risks associated with the sale of service member data, it’s imperative to reiterate our unwavering commitment to safeguarding the privacy and integrity of service members’ information at Quandis Military Search (QMC). Our automated service ensures that no Quandis employees are involved in data processing, and it […]
Vulnerabilities in the HTTP/2 protocol were recently announced a per CVE-2023-44487. Quandis uses cloud services from AWS, Azure and Google. These cloud providers have remediated the HTTP/2 issue as per the links below. AWS Bulletin Google Update Microsoft Response Our web applications are hosted in AWS which are fronted by AWS Application Load Balancers, and […]
The recent security breach at Okta’s via their partner Sitel does not affect Quandis or QBO-based systems. Quandis does not use Okta’s IDP platform.
Quandis is not impacted by the Apache Log4j2 vulnerability flagged by CVE-2021-44228. Partners such as LogicMonitor, AWS, Microsoft and Google were impacted and have mitigated the issue as of December 11.
Quandis is not impacted by the Apache path normalization vulnerability flagged by CVE-2021-41773 and CVE-2021-42013. Quandis does not use Apache servers.
Quandis does not use Kaseya VSA Software, and as such, we are not affected by the recent ransomware attacks. Does your company use Kaseya VSA Software? (Y/N) NO If you answered YES above: Have you scanned or otherwise assessed your networks to ensure unauthorized parties have not gained access? (Y/N) N/A Have you experienced any […]