[PLUG] Krebs: Whistleblower: Ubiquiti Breach “Catastrophic”

[JP Vossen via plug <plug@lists.phillylinux.org>]

https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/

Very interesting article.  If it's all true, "Catastrophic" is too mild.

I love this part:
	"Adam says the attacker(s) had access to privileged credentials that were previously stored in the LastPass account of a Ubiquiti IT employee, and gained root administrator access to all Ubiquiti AWS accounts, including all S3 data buckets, all application logs, all databases, all user database credentials, and secrets required to forge single sign-on (SSO) cookies."

Later,
JP
--  -------------------------------------------------------------------
JP Vossen, CISSP | http://www.jpsdomain.org/ | http://bashcookbook.com/
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug