News for hackers. Stuff that matters.
Re:SolarWinds: What Hit Us Could Hit Others by _wldu on Tuesday January 12, 2021 @04:37PM (#25754158)
Especially if they are domain joined.
Re:SolarWinds: What Hit Us Could Hit Others by dilyevsky on Tuesday January 12, 2021 @04:49PM (#25754350)
Just don’t. Inb4 “but Microsoft has most sophisticated security” crowd, every major hack of the last 15 years always starts with compromised windows box that allows attacker an outpost to move laterally.
Re:SolarWinds: What Hit Us Could Hit Others by intern4tional on Tuesday January 12, 2021 @06:19PM (#25755421)
Then you should go review major security events.

Attackers have been able to compromise major environments regardless of OS type. Windows having a larger market share is clearly going to have more compromises, but other OS based environments are just as prone to compromise. There also have been major incidents with standalone applications that are OS agnostic.

Heartbleed is a great example of an OS agnostic flaw that was used for major attacks. As noted earlier while the OS does play an issue, its more than likely just correlation rather than causation due to Microsoft having a dominant position in the market.

Reference: https://en.wikipedia.org/wiki/Heartbleed#Exploitation

Re:SolarWinds: What Hit Us Could Hit Others by dilyevsky on Tuesday January 12, 2021 @06:22PM (#25755453)
Source of major leak/intrusion as a result of heartbleed? That was 2013 btw and I remember it clearly - since it was closed pretty quickly I don’t recall anything major coming out of it

Edit: i mean when it was 0day. Obviously if some idiot didn’t patch their servers it shouldn’t count

Re:SolarWinds: What Hit Us Could Hit Others by citiguy on Tuesday January 12, 2021 @09:10PM (#25757098)
It's very possible there were several and nobody noticed them, or nobody attributed them correctly.

There are also the Spectre and Meltdown attacks which exploited Intel cpu pipeline bugs regardless of the OS running on them.

Re:SolarWinds: What Hit Us Could Hit Others by dilyevsky on Wednesday January 13, 2021 @12:32AM (#25758591)
Spectre/meltdown imo is basically same category of security vulnerabilities - big monopoly cutting corners on security for commercial gain