Yeah “target Windows”.
this post was submitted on 20 Jul 2024
120 points (96.9% liked)
Pulse of Truth
400 readers
34 users here now
Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).
This community is automagically fed by an instance of Dittybopper.
founded 10 months ago
MODERATORS
Worse... target CrowdStrike or any other security monitoring system... which means being able to get in anything, Windows, Linux, MacOS... not that they don't already do that. Because they definitely do.
It had already been done see: SolarWinds
Somehow they are still in business
My point exactly. What good is a dozen docker containers nested in four VMs if you can slap all of it aside with the giant ROOT SHELL hand because you hacked into the remote monitoring software to take control of the system.
The remote management system is now the weaket link in the system's security chain.
If it’s specifically allowed, yes. Windows is swiss cheese with tons of contaminants in.
Any remote monitoring software is a swiss cheese opening into your system.
Not necessarily. Proper permissions and lack of system bugs are ok to monitor, it doesn’t mean the system is less secure.
Why the fuck does the writer think that state actors weren't already aware of these vectors?
we’ll do all their work for them, they just need to sit back and take credit the next time we shoot ourselves in the foot …
Oh, great
What do you mean “may have”
Depends on if they already knew this information or not.
I mean, isn't this also a problem in other Western countries? Australia got it bad.
Yes, but only country that matters is US /s
Also, they are likely the primary targets (certainly not the only ones) for bad actors.
way to go a**holes!
Uh, between SolarWinds and XZ and the supply chain attacks being conducted by the NSA that were revealed by Snowden... They already know.