Восстановленный таймлайн атаки на Equifax.
Если кратко не успели запатчить Apache struts, не сегментировали БД, просроченный сертификат на проксе/ids.
#Equifax #apache #hack
US government releases post-mortem report on Equifax hack | ZDNet
https://www.zdnet.com/article/us-government-releases-post-mortem-report-on-equifax-hack/
Если кратко не успели запатчить Apache struts, не сегментировали БД, просроченный сертификат на проксе/ids.
#Equifax #apache #hack
US government releases post-mortem report on Equifax hack | ZDNet
https://www.zdnet.com/article/us-government-releases-post-mortem-report-on-equifax-hack/
ZDNET
US government releases post-mortem report on Equifax hack
GAO report takes us inside Equifax from March 2017 onward, showing how a few slip-ups led to one of the biggest breaches in US history.