13 Replies to “It’s Probably Nothing”

  1. That’s an extremely sophisticated attack. There’s really not much you can do if a malicious actor gets hold of your upstream vendor’s code-singing cert, but then most places I’ve worked for/with have absolutely atrocious internal security, including ones that held HIPAA/PIPEDA protected customer data.

    The “low and slow” nature of the operation smells of a state actor. Criminal organizations don’t care what they break in the process of stealing your money, and lone hackers want you to know you’ve been hacked.

    1. I agree it has just about got to be a state actor. Unless the Bond movies have it right about there being an organization like SPECTRE. But it seems like they are going after stuff Red China is lusting over.

      We will know for certain if TimG comes on here and says it’s a stupid story about nothing.

      1. But didn`t I read somewhere that a Cyber Security guy named Esper who supposedly was the head of Cyber Security for the entire USA, state unequivocally and with out any doubt the systems were safe and not hacked. Who are we to doubt his expertise. Nothing to see here, move along folks. When do the arrests begin.

  2. I have no idea what that complex article was all about.

    Bad Hackers …. Po’ corporations. That my level of understanding on this.

    Thanks for posting it … it is a peek into the new forms of really cool piracy.

    I guess.

  3. I agree with the headline. It’s probably nothing. With a whopping 300,000 customers it is time to take serious world wide action, or not.

  7. I read the article. I have been a computer professional for 45 years, but my specialty is not security related issues. This is a sophisticated breach.

    I have been involved with SolarWinds in the last 4 companies at which I worked, covering the last 20 of the years I was employed. I always thought they were amateurs and I was never impressed with the quality of their offerings. If offered a vote when evaluating their products, I voted no based on my analysis and experience. If the update server’s password was really SolarWinds123, I would not be surprised. It would be typical of the rest of the stuff they vend. However, this is my opinion only and was not necessarily shared by the executive types that made the real decisions (and are easily fooled by marketing hype).

    The gullibility of inadequately skilled IT management cannot be overstated. Contrary to protestations, speaking truth to power is seldom appreciated if the truth differs from their, usually, poorly informed understanding of reality,

Proudly powered by WordPress & Skyrocket Themes

MENU

Navigation