Security
Victims "predominantly belong to large enterprises and critical infrastructure operators"
Parcels were moving again in six weeks but the "full recovery" took much longer
"We've seen warning signs first-hand"
"Impose remote access controls on all..."
"Has to be record-breaking in our experience"
"We have improved our ability to detect forged tokens and are expanding asynchronous validation to additional Microsoft workloads. We are partitioning critical infrastructure identity keys to reduce impact if they are compromised"
"It’s probably going to take a major disruption of an event from a cyber attack for people to start waking up."
Sonatype co-founder: Stop me if you’ve heard this one before
Users advised to immediately update or restrict SSH server access