3 Replies. 1 pages. Viewing page 1.
Newer [  1  ] Older
3.
 
Re: Morning Safety Dance
Apr 5, 2021, 22:36
3.
Re: Morning Safety Dance Apr 5, 2021, 22:36
Apr 5, 2021, 22:36
 
Thanks Dev,
I'll go thru all of it and nuke passwords and inform the equipment owners.
I see ubiquti's EVERYWHERE. And I bet half of the owners / operators / service personnel don't have a clue. double sigh
- At this point, Windows is the OS equivalent of Stockholm Syndrome. -
Burrito of Peace
Avatar 58135
2.
 
Re: Morning Safety Dance
Apr 5, 2021, 22:20
Dev
2.
Re: Morning Safety Dance Apr 5, 2021, 22:20
Apr 5, 2021, 22:20
Dev
 
RedEye9 wrote on Apr 5, 2021, 20:43:
Dangit ubiquiti. I didn't get an email. Now i gotta study wtf is going on.

Here's the rumor:

The whistleblower, “Adam,” spoke on condition of anonymity for fear of reprisals from Ubiquiti. Adam said the place where those key administrator credentials were compromised — Ubiquiti’s presence on Amazon’s Web Services (AWS) cloud services — was in fact the “third party” blamed for the hack.

From Tuesday’s piece:

“In reality, Adam said, the attackers had gained administrative access to Ubiquiti’s servers at Amazon’s cloud service, which secures the underlying server hardware and software but requires the cloud tenant (client) to secure access to any data stored there.

“They were able to get cryptographic secrets for single sign-on cookies and remote access, full source code control contents, and signing keys exfiltration,” Adam said.

Adam says the attacker(s) had access to privileged credentials that were previously stored in the LastPass account of a Ubiquiti IT employee, and gained root administrator access to all Ubiquiti AWS accounts, including all S3 data buckets, all application logs, all databases, all user database credentials, and secrets required to forge single sign-on (SSO) cookies.

Such access could have allowed the intruders to remotely authenticate to countless Ubiquiti cloud-based devices around the world. According to its website, Ubiquiti has shipped more than 85 million devices that play a key role in networking infrastructure in over 200 countries and territories worldwide.
1.
 
Re: Morning Safety Dance
Apr 5, 2021, 20:43
1.
Re: Morning Safety Dance Apr 5, 2021, 20:43
Apr 5, 2021, 20:43
 
Dangit ubiquiti. I didn't get an email. Now i gotta study wtf is going on.
- At this point, Windows is the OS equivalent of Stockholm Syndrome. -
Burrito of Peace
Avatar 58135
3 Replies. 1 pages. Viewing page 1.
Newer [  1  ] Older