Morning Safety Dance [Apr 05, 2021, 10:58 am ET] – Share – Viewing Comments
3 Replies. 1 pages. Viewing page 1.
Newer [ 1 ] Older
Newer [ 1 ] Older
Thanks Dev,
I'll go thru all of it and nuke passwords and inform the equipment owners.
I see ubiquti's EVERYWHERE. And I bet half of the owners / operators / service personnel don't have a clue. double sigh
I'll go thru all of it and nuke passwords and inform the equipment owners.
I see ubiquti's EVERYWHERE. And I bet half of the owners / operators / service personnel don't have a clue. double sigh
- At this point, Windows is the OS equivalent of Stockholm Syndrome. -
Burrito of Peace
Burrito of Peace
RedEye9 wrote on Apr 5, 2021, 20:43:
Dangit ubiquiti. I didn't get an email. Now i gotta study wtf is going on.
Here's the rumor:
The whistleblower, “Adam,” spoke on condition of anonymity for fear of reprisals from Ubiquiti. Adam said the place where those key administrator credentials were compromised — Ubiquiti’s presence on Amazon’s Web Services (AWS) cloud services — was in fact the “third party” blamed for the hack.
From Tuesday’s piece:
“In reality, Adam said, the attackers had gained administrative access to Ubiquiti’s servers at Amazon’s cloud service, which secures the underlying server hardware and software but requires the cloud tenant (client) to secure access to any data stored there.
“They were able to get cryptographic secrets for single sign-on cookies and remote access, full source code control contents, and signing keys exfiltration,” Adam said.
Adam says the attacker(s) had access to privileged credentials that were previously stored in the LastPass account of a Ubiquiti IT employee, and gained root administrator access to all Ubiquiti AWS accounts, including all S3 data buckets, all application logs, all databases, all user database credentials, and secrets required to forge single sign-on (SSO) cookies.
Such access could have allowed the intruders to remotely authenticate to countless Ubiquiti cloud-based devices around the world. According to its website, Ubiquiti has shipped more than 85 million devices that play a key role in networking infrastructure in over 200 countries and territories worldwide.
Dangit ubiquiti. I didn't get an email. Now i gotta study wtf is going on.
- At this point, Windows is the OS equivalent of Stockholm Syndrome. -
Burrito of Peace
Burrito of Peace
3 Replies. 1 pages. Viewing page 1.
Newer [ 1 ] Older
Newer [ 1 ] Older
Copyright © 1996-2023 Stephen Heaslip. All rights reserved.
All trademarks are properties of their respective owners.
Privacy Policy. Manage Cookie Settings.
News CGI copyright © 1999-2023 James "furn" Furness & Blue's News. All rights reserved.
Chatbear v1.5.0/blue++: Page generated 4 February 2023, 23:49.