Why is this video in ?
Look at the attack vectors these hacker groups used.
A third party IT support company that made no effort to verify someone’s identity before granting them full access to an employee’s corporate account (the hackers faked a password reset request). Pajeets.
Someone accepts $25,000 from a hacker group to hand over an auth token that grants full control of their corporate account at a major security software vendor. That was a pajeet.
Even the level of access these third party apps have to companys’ SalesForce accounts. That access should have been severely limited but it was wide open for anyone who got their hands on one of those third party tokens. Pajeets.
He politely says insiders are your biggest security threat. He meant to say pajeets.
Why is this video in /s/pajeets?
Look at the attack vectors these hacker groups used.
A third party IT support company that made no effort to verify someone’s identity before granting them full access to an employee’s corporate account (the hackers faked a password reset request). Pajeets.
Someone accepts $25,000 from a hacker group to hand over an auth token that grants *full control* of their corporate account at a major security software vendor. That was a pajeet.
Even the level of access these third party apps have to companys’ SalesForce accounts. That access should have been severely limited but it was wide open for anyone who got their hands on one of those third party tokens. Pajeets.
He politely says insiders are your biggest security threat. He meant to say pajeets.