Solar Winds - Fireye

Here we go again.

As reported by the respected CSO Magazine,

The recent breach of major cybersecurity company FireEye by nation-state hackers was part of a much larger attack that was carried out through malicious updates to a popular network monitoring product and impacted major government organizations and companies...

A hacker group believed to be affiliated with the Russian government gained access to computer systems belonging to multiple US government departments including the US Treasury and Commerce in a long campaign that is believed to have started in March. The news triggered an emergency meeting of the US National Security Council...

The attack involved hackers compromising the infrastructure of SolarWinds...

SolarWinds stated that its customers included 425 of the US Fortune 500, the top ten US telecommunications companies, the top five US accounting firms, all branches of the US Military, the Pentagon, the State Department, as well as hundreds of universities and colleges worldwide.

The SolarWinds software supply chain attack also allowed hackers to access the network of US cybersecurity firm FireEye, a breach that was announced last week. Even though FireEye did not name the group of attackers responsible, the Washington Post reports it is APT29 or Cozy Bear, the hacking arm of Russia's foreign intelligence service, the SVR.”

The article’s second section is entitled

No easy solution

And that’s certainly the case.

But that’s just half of the story. The other half is that decades ago, when digital security was just getting started (it’s nearly a trillion dollar industry today), some fateful decisions were made, the consequence of which is that not only is there no easy solution; there is no solution at all.

No easy solution

No solution, that is, unless we stop thinking about security as a cops and robbers game and start thinking about security in digital spaces using the concepts that have proven themselves for centuries to managers of physical spaces. To see what we mean, watch this video:

Then learn about the amazing PKI construction material that the solution is made of:

PKI has been around a long while. Now it needs to be deployed properly to actually solve our problems. Learn about PKIDR- PKI Done Right - in this video:

Thanks for watching our videos.

You’ seen how Real Accountability will bring Real Security and Real Privacy to your world – but only if people like you join us in building an information infrastructure that supports Real Accountability, Real Security and Real Privacy.

You can join us by

Participating in the governance of the City of Osmio, or
Through your financial contribution to ensure that Osmio gets up and running on its own,
Or both!