That the outcome of such efforts is published by the government impacted is interesting but that begs the question of what the actual goal of releasing the information is, right? That's the interesting bit here.
That the outcome of such efforts is published by the government impacted is interesting but that begs the question of what the actual goal of releasing the information is, right? That's the interesting bit here.
They used unpatched exploits in EOL network gear made by linksys that were several years past their expiration date to get into this system and then moved laterally. The root cause is a lack of investment in backbone security.
I would like the actual problem be fixed instead of a scapegoat this time.
The primary concern should be the fact that we've built infrastructure that is easily eavesdropped on by foreign adversaries. Heck, assuming these users weren't on DSN, we already have a solution: DSN. We also have mobile solutions, like asking politically vulnerable people to use Signal, or developing secure technology for these users to use.
Taking into account the latest wave of hardcoded passwords in Cisco, Fortinet and Palo Alto, i don't think that was the intention.