Discover and read the best of Twitter Threads about #DSC24
Most recents (1)
The last bit of @devseccon is ongoing, go join! #DSC24
Or, just watch this 🎥or read this 🧵from my talk with @csoandy. We tell war stories of 5 watershed security incidents: FluffyBunny, Operation Aurora, DigiNotar, NotPetya and SolarWinds.
Or, just watch this 🎥or read this 🧵from my talk with @csoandy. We tell war stories of 5 watershed security incidents: FluffyBunny, Operation Aurora, DigiNotar, NotPetya and SolarWinds.
These are just some of incidents that inspired us to build @getBastionZero, which eliminates single points of compromise while providing zero-trust remote access to servers, containers and clusters. 2/x
bastionzero.com
bastionzero.com
We start with FluffyBunny.
The attacker overwrote SSH clients with malware. And the malware steals SSH keys. And this was in 2001!
🧐This is classic example illustrates why standing credentials are bad. Because if stolen today, they can be used to attack in the future! 3/x
The attacker overwrote SSH clients with malware. And the malware steals SSH keys. And this was in 2001!
🧐This is classic example illustrates why standing credentials are bad. Because if stolen today, they can be used to attack in the future! 3/x
