Anthem: 343 Days, No Alarm
Impossible d'ajouter des articles
Désolé, nous ne sommes pas en mesure d'ajouter l'article car votre panier est déjà plein.
Veuillez réessayer plus tard
Veuillez réessayer plus tard
Échec de l’élimination de la liste d'envies.
Veuillez réessayer plus tard
Impossible de suivre le podcast
Impossible de ne plus suivre le podcast
-
Lu par :
-
De :
In February 2015, Anthem, then the second-largest US health insurer, disclosed that attackers had reached the permanent records of 78.8 million people. The intrusion had run 343 days, starting with one spear-phishing email at a subsidiary and ending at the enterprise data warehouse, and no automated system ever flagged it. The logins were real, the traffic was internal, and the data left through a file-sharing service the company already used. What finally caught it was a database administrator who noticed a query running under his own name that he had not run. Regulators later found that the safeguards which would have stopped it had been mandatory in healthcare for over a decade. From Zero Day Logs.
adbl_web_anon_alc_button_suppression_t1
Aucun commentaire pour le moment