Investigating the Server Breach

Прочитайте цю статтю вголос

Увімкніть мікрофон і читайте у своєму темпі. Слова підсвічуються на ходу, і ніхто не зупиняє вас через одну помилку.

Ваш звук не потрапляє до MovaReader: розпізнає його ваш браузер. Політикою конфіденційності

Увійдіть, щоб ця сесія збереглася в історії читання.

Investigating the Server Breach

When the forensic report finally reached our department, several engineers admitted we ought to have encrypted the legacy databases sooner. The cloud infrastructure looked secure on paper, yet secure it was not against the new malware strain.

What the incident response team needed was immediate network isolation, not a series of bureaucratic approvals. Ought we to have severed the connection instantly? Most of us now think we ought, though at the time few dared bypass the standard protocol.

It was Sarah who first noticed the anomaly in the traffic logs. It was speed that the attackers emphasised, and emphasise it they did until gigabytes of encrypted data were exfiltrated. Sarah dare not shut down the core router herself, nor dare I, though both of us documented our reservations.

They might have stopped the leak had the vendor patched the vulnerability earlier.