NATO Classified Cloud Platform Compromised

#1

Post by afrcnc » Tue, Jun 29, 2021, 10:37 PM UTC

NATO Classified Cloud Platform Compromised
ddosecrets.substack.com

Re: NATO Classified Cloud Platform Compromised

#2

Post by randombits0 » Wed, Jun 30, 2021, 12:45 AM UTC

How’s that Zero Trust working out for ya?

Re: NATO Classified Cloud Platform Compromised

#3

Post by HHC-Hunter » Wed, Jun 30, 2021, 1:01 AM UTC

randombits0 wrote: post #2

How’s that Zero Trust working out for ya?

I really wish more companies would implement Zero Trust. It's just so nonsensical to trust any device at this point - No matter how "secure" someone tells you it is, or even you think it is.

Re: NATO Classified Cloud Platform Compromised

#4

Post by spaniard89277 » Wed, Jun 30, 2021, 1:05 AM UTC

Everis is the typical meat grinder, and it is known for that in Spain.

Now, just as I'm writing this I'm sure someome from Everis will chime in to say he gets paid handsomely and works for amazing projects.

But everyone I've known working for Everis wants to die.

And if such project had to land in Spain for political reasons, there are plenty of companies capable on taking such project with way better prospects.

Re: NATO Classified Cloud Platform Compromised

#5

Post by jimbojet » Wed, Jun 30, 2021, 1:27 AM UTC

randombits0 wrote: post #2

How’s that Zero Trust working out for ya?

Better than trusting the perimeter. A single breach in a “trustful” intranet still results in full network compromise. Best to assume breach and work from there. Hating on zero trust is non-sensical to me, feels like the same as hating on security.

Re: NATO Classified Cloud Platform Compromised

#6

Post by 0xCMP » Wed, Jun 30, 2021, 1:31 AM UTC

> "which basically tricks organizations into spending a ton of money for installing Docker into a CentOS image without any cryptographic signature to verify the integrity of that image."

Ouch

Re: NATO Classified Cloud Platform Compromised

#7

Post by devetec » Wed, Jun 30, 2021, 1:57 AM UTC

Distributed Denial of Secrets, you've done it again!

Re: NATO Classified Cloud Platform Compromised

#8

Post by alexfromapex » Wed, Jun 30, 2021, 2:03 AM UTC

How was it breached and what’s the fall out?

Re: NATO Classified Cloud Platform Compromised

#9

Post by [deleted] » Wed, Jun 30, 2021, 2:26 AM UTC

jimbojet wrote: post #5

randombits0 wrote: post #2

How’s that Zero Trust working out for ya?

Better than trusting the perimeter. A single breach in a “trustful” intranet still results in full network compromise. Best to assume breach and work from there. Hating on zero trust is non-sensical to me, feels like the same as hating on security.

[deleted]

Re: NATO Classified Cloud Platform Compromised

#10

Post by mrjin » Wed, Jun 30, 2021, 2:46 AM UTC

devetec wrote: post #7

Distributed Denial of Secrets, you've done it again!

Oh well, shouldn't that be Centralized Distribution Secrets?