Barracuda thought it drove 0-day hackers out of customers’ networks. It was wrong.
(arstechnica.com)
from tedu@azorius.net to cloudsec@azorius.net on 31 Aug 2023 03:54
https://azorius.net/g/cloudsec/p/1gVpVq9yXqZ3JC1Z9R-Barracuda-thought-it-drove-0day-hackers-out-of-c
from tedu@azorius.net to cloudsec@azorius.net on 31 Aug 2023 03:54
https://azorius.net/g/cloudsec/p/1gVpVq9yXqZ3JC1Z9R-Barracuda-thought-it-drove-0day-hackers-out-of-c
The hackers’ uncanny ability to reinfect their targets solves a mystery from early last month. A June 6 update to the company’s ongoing security advisory no longer recommended patching as a viable means of remediation. Instead, it advised the “immediate replacement of compromised ESG appliances, regardless of patch level.” Until now, the reasoning for the unusual recommendation was unclear.
#cloudsec
threaded - newest