State hack: how was it done?

I haven’t followed the story at all. I saw a couple articles but they focused on the office closures, not the cause. Figured someone here might be more informed.

What you described is not what happened. it was a very sophisticated attacked. I will say that users do not have local admin. The security is damn good.

quote:

---

What you described is not what happened. it was a very sophisticated attacked. I will say that users do not have local admin. The security is damn good.

---

Correct. Basically nothing terrible/irreversible happened outside of inconvenience. That's about as good as you can ask for. It's not a matter of if you're going to get breached. It's when.

The state is already heavily invested in security and is essentially run by security. You can't do anything without going through security. A lot of us in the private sector can not run security like they do at the state so we're much more vulnerable. We don't have anywhere near the resources and expensive equipment that the state does. If i put our engineers and developers in a state of paralysis in the name of security they would fire me on the spot.

Even worse, they find work-arounds that are worse than what I was protecting us from.

So instead of hand wringing and complaining, we should A) be glad that no citizen data was compromised or lost and B) demand that the state shares information about how it happened and what they learned in the process. Obviously, without naming names. That way it may help the rest of us.

I have not been told or heard what officially happened but I am still leaning to trickbot being installed and consequently Ryuk being pushed to endpoints for encryption.

quote:

---

Wrong

---

Your argument intrigues me and I would like to subscribe to your newsletter.