Rackspace internal monitoring web servers hit by zero-day Rackspace has told customers intruders exploited a zero-day bug in a third-party application it was using, and abused that vulnerability to break into its internal performance monitoring environment. That intrusion forced the cloud-hosting outfit to temporarily take its monitoring dashboard offline for customers. Reading …
The idea of classical security procedures is that you minimise attack surfaces, but also minimise what can be done in the event of a successful hack, and to maximise active detection and elimination of attacks as they take place.
More modern security practices have multiple layers of castle wall for things that don't actually need direct access.
In order for an attack that results in remote access to succeed, you need a minimum of three different security failings. Depending on what level of access was achieved, and the level of network segment isolation, it can take six of seven failings.
In practice, operations take shortcuts, so it's rare you get to quite that degree.
Regardless of how many layers there were, a breech of security requires problems in far more than just an application. I'd want to know what the additional failings were.
If you have a public facing URL with a vulnerability, that is 1 issue and it WILL result in a compromise of whatever data that script/application has access to. What makes you think you need multiple issues to get compromised?
It seems that the system in question only had access to the data required to do it's job, so their systems were set up correctly.
Hey, what happened to Rackspace? It’s just another example of all the issues of new ISP‘s as well as manage service providers are now facing. We have increased our partnerships and investments in cyber security protecting our information as well as advancements in our AI and DNA analysis of attacks my concern is in our concern for our constituents for companies. They have large assets millions of customers like Rackspace have these issues isn’t even more important for smaller companies to work together to protecting our infrastructure Pompeo‘s former secretary of the fence several years ago in a conference that was held by contractors and other agents with an agencies mention a cyber war would be the new frontier and unfortunately he was so true. We think the register for sharing this articles and other related information to cyber security. We look forward to continue to be a source of resources, as well as feedback on these type of articles and also posting issues that we might find that other people within your writers and readers can participate gather and take back to add further layers of security as well as comfort in knowing that there is others who are going through the same issues And yet working towards a solution for no security of financial institution, but national security as well. We as a nation as well as a global data providers need to work together and providing a a comprehensive plan as well as resources to protect information information is the new gold mine and he who has it Can other advanced the world or turn it into darkness.?
This post has been deleted by its author
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
