Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

Re:Foreign hackers breached a US nuclear weapons plant via S... by ta1243 on Tuesday October 21, 2025 @02:04PM (#45659283)

Which really isn't a problem, unless you're being scanned so much your bandwidth is being overwhelmed. Certainly not the case for me, despite having port 80 and 443 open

[ Parent | on HN ]

Re:Foreign hackers breached a US nuclear weapons plant via S... by tgv on Tuesday October 21, 2025 @02:13PM (#45659439)

I have a server that has a slow (5s) response to unknown pages, returns it as 200, and makes the next failing request even slower (for unauthenticated users). That seems to keep the number of requests limited. Perhaps I should just drop the connection after a certain number of requests.

BTW, quite a few of these port scanners are companies that offer to scan your ports for vulnerabilities. Temu pen testing, so to speak.

[ Parent | on HN ]

Re:Foreign hackers breached a US nuclear weapons plant via S... by eks391 on Tuesday October 21, 2025 @02:36PM (#45659762)

Do you configure this in your firewall? How can I replicate this?

[ Parent | on HN ]

Re:Foreign hackers breached a US nuclear weapons plant via S... by fragmede on Tuesday October 21, 2025 @10:11PM (#45664190)

what firewall do you use?

[ Parent | on HN ]

Re:Foreign hackers breached a US nuclear weapons plant via S... by tgv on Wednesday October 22, 2025 @10:12AM (#45669471)

It's in the "404" handler of the backend. It should be possible to write a caddy or nginx module for it.

[ Parent | on HN ]