An Intruder Spent At Least Nine Days Inside Backup Servers. A Patch Wouldn’t Have Removed It, Huntress Says.
Attackers broke into three AhsayCBS backup servers before a fix existed. They read the backup user database and held domain administrator credentials, Huntress told CINI. Nobody noticed for at least nine days. Patching closes the door, Huntress says. It doesn’t remove what is already inside. Backups are the recovery plan. Insurers ask about them for … Read more