Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on U.S. to give ransomware hacks similar priority as terrorism, official says. Parent comment
Why? Many of the companies who got hacked had massive IT issues of their own fault, the most common being:
- full access for everything across the whole network, no subnetting with strict firewalls that limits the scope of an intrusion
- outdated software/firmware stacks leading to avenues for compromise
- no/ineffective/outdated virus scanners
- no meaningful backup infrastructure and regular testing if said infrastructure is already working
- lack of 2FA on administrative credentials
- lack of monitoring on central file servers to detect if a compromised machine is encrypting the file server's contents piece by piece
> It's physically impossible to build a house that can't be broken in to
Indeed, but a burglary insurance will likely refuse service or jack up rates if you don't lock your door or not have an alarm system installed.
There are no comments on this comment yet.
Why? Many of the companies who got hacked had massive IT issues of their own fault, the most common being:
- full access for everything across the whole network, no subnetting with strict firewalls that limits the scope of an intrusion
- outdated software/firmware stacks leading to avenues for compromise
- no/ineffective/outdated virus scanners
- no meaningful backup infrastructure and regular testing if said infrastructure is already working
- lack of 2FA on administrative credentials
- lack of monitoring on central file servers to detect if a compromised machine is encrypting the file server's contents piece by piece
> It's physically impossible to build a house that can't be broken in to
Indeed, but a burglary insurance will likely refuse service or jack up rates if you don't lock your door or not have an alarm system installed.