The SolarWinds hack is a fundamental challenge, but I went into work yesterday focused on the same basics.

This may be a game-changer for policy and industry, but the essentials are what make the difference here. It revalidates basic visibility and monitoring. Same as before.

I do not see complex networks as they exist today as bastions where you can close your eyes anywhere assuming you're fine.

What if an attacker just compromised Orion with an exploit like a normal attacker? Or pivoted into its memory space from elsewhere?

What's the difference?
You've got to have pretty incredible network segmentation and administrative tiering and insider threat program before this kind of attack is the biggest risk to worry about.

That doesn't mean it's not incredibly serious. But we're failing way worse than this every single day.
This is a hard dichotomy to talk about without sounding dismissive, but I think it's worth bringing up. Be ever more mindful, but keep our foot on the gas on our fundamentals without letting up.
I'm putting some thoughts together, but I can't get over the fact _they didn't even try to infect your network if it looked like you were watching the machine_.

Like, we should be screaming about this. They know this shit works against them.
Note: This is not saying FireEye and other networks did not have monitoring in place, but it may not have been with tools in their list of "nope I'm not even trying" list.

The fact they hit FireEye seems like a massive mistake since they have internal custom tooling.
Everyone is doom and gloom while I'm like Neil Patrick Harris in Starship Troopers where he puts his hand on the bug and says "they feel fear" and everybody cheers.
It's worth saying, cyber hygiene may be in refutation of buzzwords, but it's not the end-all-be-all of IT protection.
You do need top-flight systems and people at the edges looking for the exceptional vectors.
But I want to keep harping on these fundamentals for everybody else.

More from War

#35 POTUS will be well insulated/protected on AF1 and abroad (specific locations classified) while these operations are conducted due to the nature of the entrenchment. It is time to take back our country and make America great again. Let us salute and pray for the brave men


and women in uniform who will undertake this assignment to bring forth peace, unity, and return power to the people. It is our hope that this message reaches enough people to make a meaningful impact. We cannot yet telegraph this message through normal methods for reasons I’m

sure everyone here can understand. Follow the questions from the previous thread(s) and remain calm, the primary targets are within DC and remain at the top (on both sides). The spill over in the streets will be quickly shut down. Look for more false flags – stay alert, be

vigilant, and above all, please pray. “For God so loved the world that he gave his one and only Son, that whoever believes in him shall not perish but have eternal life. Love is patient, love is kind.” God bless my fellow Americans. 4,10,20
#4 Some of us come here to drop crumbs

, just crumbs. POTUS is 100% insulated - any discussion suggesting he’s even a target is false. POTUS will not be addressing nation on any of these issues as people begin to be indicted and must remain neutral for pure optical reasons. To suggest this is the plan is false and

You May Also Like