Forest Global Training Partners

Cyber Risks · Krebs on Security

Breach at IT Automation Firm LANDESK

Summary: LANDESK, a Utah-based maker of IT management and endpoint security software, told current and former employees on Nov. 18, 2015 that an intrusion may have exposed names and Social Security numbers. An employee speaking anonymously said system logs showed attackers first entered the network in June 2014, about 17 months earlier, and that they compromised the passwords of the global IT director in Utah and a domain administrator in China, archived data from build and source code servers, and uploaded it to LANDESK's web servers.

Bottom line: LANDESK sells software that organizations use to remotely manage fleets of desktops, servers and mobile devices, so theft of its source code could let attackers embed a back door reaching a large number of customer machines worldwide - and the intrusion reportedly went unnoticed for 17 months until co-workers complained of slow Internet speeds.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related