News for hackers. Stuff that matters.

A comment on Hackers went undetected in Citrix’s internal network for six months. Parent comment

Re:Hackers went undetected in Citrix’s internal network for ... by bdibs on Tuesday April 30, 2019 @11:38PM (#19794349)
Proper audit logs that are regularly checked.
[ Parent | on HN ]
Re:Hackers went undetected in Citrix’s internal network for ... by drb91 on Wednesday May 01, 2019 @12:25AM (#19794529)
Assuming the exfiltration can be differentiated from normal behavior!
[ Parent | on HN ]
Re:Hackers went undetected in Citrix’s internal network for ... by auiya on Thursday May 02, 2019 @11:43AM (#19809105)
Seeing large amounts of encrypted traffic leaving via a DNS tunnel during non-standard business hours for instance would be an example of such an anomaly. It's not always that easy to detect however.
[ Parent | on HN ]
Re:Hackers went undetected in Citrix’s internal network for ... by mirimir on Wednesday May 01, 2019 @04:19AM (#19795379)
Didn't Sony pick up exfiltration through exceptional data flows?
[ Parent | on HN ]
Re:Hackers went undetected in Citrix’s internal network for ... by IncRnd on Wednesday May 01, 2019 @04:42AM (#19795474)
Sony was hacked 19 times in two weeks. There was a lot they didn't pick up on due to the difficulties involved with that.
[ Parent | on HN ]