On: Hackers used SolarWinds' dominance against it in sprawling spy campaign

[eatonphil]

> Neither the password nor the stolen access is considered the most likely source of the current intrusion, researchers said.

For what it's worth.

[BLKNSLVR → eatonphil]

Burglar 1: "Hey guys I managed to bypass the security system on the window and jimmy it open just enough for us to squeeze in and out"

Burglar 2: "Key's under the doormat"

[ashtonkem → eatonphil]

With such a blisteringly dumb mistake already being made, I’m sure the attackers had to choose which one of the wide open doors to use.

[grupthink → ashtonkem]

Yep, forget security through obscurity. They're going for paralysis through over-analysis.

[ashtonkem → grupthink]

I know you’re joking, but leaving out honeypots to slow down enemy attackers is a valid strategy. Except you need to purposefully leave honeypots that don’t have anything valuable in them. They seemed to have misunderstood the strategy.

[ratsmack → eatonphil]

It's surprising how many hacks are from insiders or through social engineering.

[cratermoon → ratsmack]

It's not surprising if you track the industry news.