Attackers re-write JavaScript loaded by the VPN login page for the Appliance to capture credentials; also grabbed Veeam credentials, moved laterally for full SYSTEM control.
One vulnerability bears a striking resemblance to an 0day that was actively exploited in the wild in November 2023.
“We have our low latency stream which goes into MongoDB; we have our main engineering pipeline, which goes to S3 and gets encrypted for GDPR purposes. Then we have a Spark stream, which pulls the data into Delta Lake..."
"Simulate and exercise breach readiness, especially abilities to reduce blast radius of a cyber attack. Involve top leadership, the board, and customers in separate cyber war games, as often as practical..."
"If you get a good grip on that, happy customers, happy shareholders. If you get it wrong, you are sat on millions of pounds-worth of stock in a warehouse that you have to write off..."
Cloud migration "impairment" writes off the equivalent to 81% of the Post Office's annual restructuring costs.
On Magic Quadrants, deal size, changing approaches to cyber-resilience and learning from his father.
"Builders are creatives, if you unlock their creative power; empower them to compose with API services, new architectures… infinite possibilities emerge."
Apex Predators aside and in other news, a major telco just got hacked because it didn't have MFA set up on a critical account...