News for hackers. Stuff that matters.

A comment on Marriott CEO shares post-mortem on last year's hack. Parent comment

Re:Marriott CEO shares post-mortem on last year's hack by bahmboo on Tuesday March 12, 2019 @03:52PM (#19372245)
You point out what alarmed me. An unknown entity had admin access. That's 5 alarm stuff....but they waited 3 days to look into it. Pasted here again because formatting:

"As part of our investigation into the alert, we learned that the individual whose credentials were used had not actually made the query,"

[ Parent | on HN ]
Re:Marriott CEO shares post-mortem on last year's hack by munk-a on Tuesday March 12, 2019 @07:40PM (#19374196)
Yea... that's like saying "Oh yea, this attacker did have root access and we checked the logs of what he did and apparently he just logged in and then three hours later he edited some log file and logged out... it's weird he didn't do anything while on the server..."
[ Parent | on HN ]