ST Alpha - "These places compromised by SolarWinds are going to be better off nuking their entire sites from orbit -- (link)" (Reading a Post)

SlickerTalk
Search Archives
The Leaderboard
The FAQ

Login
Create Account

Search Dr. S. Talk
TT/ST Wiki
How Well Do You Know ...

RSS Feed

Hosting by DigitalOcean

Support ST on Ko-Fi

Down to Post

Backboards:

Posts: 156

These places compromised by SolarWinds are going to be better off nuking their entire sites from orbit -- (link)

Posted by kilbowl full of jelly 🎅 (aka kkuphal) Dec 15 '20, 08:40

(No message)

In this case, the hacker used SolarWinds to infiltrate a network, get the secret key for their 2FA, and then bypass 2FA (arstechnica.com)

Responses:

Krebs writeup -- (link) - budice Dec 15, 08:49 4
- Oh wow. "In this support advisory, SolarWinds says its products may not work properly unless their file directories are exempted from antivirus scans - decline Dec 15, 08:52 3
  - That’s not unusual for security products. -- nm - spamlet Dec 15, 08:56 2
    - true but I thought the compromised product (Orion I think) was a network monitoring tool -- nm - decline Dec 15, 08:58 1
      - Network management. I know that our network monitoring tool has the keys to the kingdom in terms of credentials inside of it. -- nm - kilbowl full of jelly 🎅 Dec 15, 09:05
2FA becomes useless if it's database is compromised. Has there been any type of response from SolarWinds? -- nm - decline Dec 15, 08:48 3
- TAPs. -- nm - jnine Dec 15, 09:11
- "Sorry for the inconvenience" - kilbowl full of jelly 🎅 Dec 15, 08:53 1
  - Mistakes were made. -- nm - 🎅Spawnta🎅 Dec 15, 08:57

Post a message top

Replies are disabled on threads older than 7 days.