US court system suffered 'incredibly significant attack'

Re:US court system suffered 'incredibly significant attack' ... by heywoodlh on Sunday July 31, 2022 @03:20AM (#32293891)

The U.S. government actually provides a lot of really awesome free security resources and I believe they implement a lot of security measures. One of my favorite security resource provided by the govt. is STIG[1]. If you take your time to implement the measures outlined in STIG in your network it would be EXTREMELY difficult (in my opinion) to break into your network/devices without a zero-day or other undiscovered exploit.

I have not worked for the govt, so I do not have a first-party understanding. And I doubt any entity is impervious to simple/well-known attack vectors (such as EternalBlue) but my experience with STIG as a security engineer has always left me really impressed with the level of research and suggestions the government provides to the public -- for free.

[1] https://public.cyber.mil/stigs/

[ Parent | on HN ]

Re:US court system suffered 'incredibly significant attack' ... by feet on Sunday July 31, 2022 @04:01AM (#32294083)

They also do this while other parts of the government have their budgets gutted. How do they pay IT to implement security?

[ Parent | on HN ]

Re:US court system suffered 'incredibly significant attack' ... by Wowfunhappy on Sunday July 31, 2022 @11:26AM (#32296178)

Parts of the government related to national security are pretty well funded.

[ Parent | on HN ]

Re:US court system suffered 'incredibly significant attack' ... by heywoodlh on Sunday July 31, 2022 @11:11AM (#32296041)

Fair enough, I don't really have first-hand experience with government IT positions so I don't have much to add with how the government implements security.

[ Parent | on HN ]