iTWire - SolarWinds FTP credentials were leaking on GitHub in November 2019
source link: https://www.itwire.com/security/solarwinds-ftp-credentials-were-leaking-on-github-in-november-2019.html
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Tuesday, 15 December 2020 07:48
SolarWinds FTP credentials were leaking on GitHub in November 2019 Featured
By Sam Varghese
Image by Andreluiz Cunha from Pixabay
More details are emerging about poor security at SolarWinds, following the compromise of its Orion network management software that was then used to effect attacks on many companies in a number of regions around the globe.
An researcher from India had advised SolarWinds in November 2019 that he had found a public GitHub repository which was leaking the company's FTP credentials.
Vinoth Kumar, who describes himself as a part-time bounty hunter, said in a tweet: "Was reading about a sophisticated attack on FireEye leveraging SolarWinds. Hmmm, how that would [have] happened? Then realised their password was *****123 Rolling on the floor laughing #FireEye #SolarWinds."
He posted a screenshot of the email sent to SolarWinds on 19 November 2019.
Asked how the company had responded, Kumar posted a screenshot of the last response he got from the company.
Another poster on the same thread, Vicky Ray, a security researcher from Palo Alto Networks, pointed out that the malicious binaries which were implicated in the attacks using SolarWinds' Orion network management software, were signed.
However he conceded: "But yeah, what you shared is also pretty bad from SolarWinds."
Subscribe to ITWIRE UPDATE Newsletter here
Now’s the Time for 400G Migration
The optical fibre community is anxiously awaiting the benefits that 400G capacity per wavelength will bring to existing and future fibre optic networks.Nearly every business wants to leverage the latest in digital offerings to remain competitive in their respective markets and to provide support for fast and ever-increasing demands for data capacity. 400G is the answer.
Initial challenges are associated with supporting such project and upgrades to fulfil the promise of higher-capacity transport.
The foundation of optical networking infrastructure includes coherent optical transceivers and digital signal processing (DSP), mux/demux, ROADM, and optical amplifiers, all of which must be able to support 400G capacity.
With today’s proprietary power-hungry and high cost transceivers and DSP, how is migration to 400G networks going to be a viable option?
PacketLight's next-generation standardised solutions may be the answer. Click below to read the full article.
WEBINAR PROMOTION ON ITWIRE: It's all about webinars
These days our customers Advertising & Marketing campaigns are mainly focussed on webinars.If you wish to promote a Webinar we recommend at least a 2 week campaign prior to your event.
The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://www.itwire.com/itwire-update.html and Promotional News & Editorial.
This coupled with the new capabilities 5G brings opens up huge opportunities for both network operators and enterprise organisations.
We have a Webinar Business Booster Pack and other supportive programs.
We look forward to discussing your campaign goals with you.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK