VMware Flaw a Vector in SolarWinds Breach?

https://krebsonsecurity.com/2020/12/vmware-flaw-a-vector-in-solarwinds-breach/

by parsecs • 6 years ago

36 7 6 years ago

Stierlitz• 6 years ago

'On Dec. 7, 2020, the NSA said “Russian state-sponsored malicious cyber actors are exploiting a vulnerability in VMware Access and VMware Identity Manager products, allowing the actors access to protected data and abusing federated authentication.”'

Enough with this retro anti Russian cyber BS ..

foolmeonce3• 6 years ago

Irregardless of who succeeded in such an exploit, the only high paying buyer that is likely to risk overt use is Russia, hence irregardless of what happened the course of action is to threaten Russia.

The US needs a boogie man but has created its own boogie man gap by destabilizing small safe boogie men.

Really it is a comedy to believe other nations don't have multiple ways into any network exposed to private sector pen testing software, just as it is a joke to believe pen testing will stop an actor that can afford to buy zero days vulnerabilities. If you need pen testing to review the standard vulnerabilities your network has had then you know your network is wide open to anyone with a multi-million dollar budget. You are assuming the US, China, Russia, NK, UK, Canada, ... won't decide this network has the highest value data of all networks they could attack to raise their GDP. There is no real boogie man, there is just a global excess of nationalist oriented powers with no accountability. Powder Keg 2.0.

ThePowerOfFuet• 6 years ago

Irregardless

I think you meant "regardless".

VMware Flaw a Vector in SolarWinds Breach?

Related Stories