Chaos at Transnet after cyber-attack

[j4ck455]

Transnet uses Cisco who punt themselves on their cybersecurity ability. Obviously being in Silicon Valley doesn't mean you ship products that are safe. But hey, blame the Russians or Chinese...

The fact is that anything and everything is vulnerable, exactly how vulnerable something is, mostly depends on whether or not all recent patches/updates have been applied.

And in the case of any entity this government has had its sticky fingers in, it is safe to assume that patches/updates have not been applied recently.

Transnet can use Cisco all it wants, doesn't mean anything if cadres are left to eat vetkoek and KFC all day long and not do any work.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=cisco

 

[r00igev@@r]

Secure equipment is only as secure as the setup thereof.

For the price they paid you would have assumed the vendor would have done all the securing and not just dropped the box.

 

[ToxicBunny]

For the price they paid you would have assumed the vendor would have done all the securing and not just dropped the box.

Depends entirely on the contracts agreed to and whether they included ongoing running of the equipment.

If this was a ransomware attack though, you could have the most secure environment in the world but if a retarded user allows that malware into the network then your perimeter protection is entirely pointless, and you would have to have some hardcore east-west security methodologies to limit the spread and many companies have very poor east-west controls.

 

[KikzAzz]

For the price they paid you would have assumed the vendor would have done all the securing and not just dropped the box.

How much did they pay?

 

[haileyfoxinsa]

Transnet uses Cisco who punt themselves on their cybersecurity ability. Obviously being in Silicon Valley doesn't mean you ship products that are safe. But hey, blame the Russians or Chinese...

Cept in this case DeathKitty is a Sonicwall ****up.

A ****up that the vendor warned the world about on July 14th (https://www.cybersecurity-help.cz/vdb/SB2021071410) and they even provided firmware updates and FREE virtual replacements for un-upgradeable hardware......................they MORE than did what is normally expected of a vendor of an EOL (End of Life) hardware platform.

HelloKitty ransomware gang is hunting for vulnerable SonicWall devices​

 

[r00igev@@r]

Cept in this case DeathKitty is a Sonicwall ****up.​

​

A ****up that the vendor warned the world about on July 14th (https://www.cybersecurity-help.cz/vdb/SB2021071410) and they even provided firmware updates and FREE virtual replacements for un-upgradeable hardware......................they MORE than did what is normally expected of a vendor of an EOL (End of Life) hardware platform.​

​

HelloKitty ransomware gang is hunting for vulnerable SonicWall devices​

Transnet uses SonicWall? They deserve it...

 

[grok]

 

[ubercal]

Transnet uses SonicWall? They deserve it...

nothing wrong with sonicwall.While its not at cisco's level , its still decent if you know how to set it up.You can have the best equipment but if its not setup right then it will fallover.

 

[r00igev@@r]

nothing wrong with sonicwall.While its not at cisco's level , its still decent if you know how to set it up.You can have the best equipment but if its not setup right then it will fallover.

I hear that often but that is no excuse. It just means that the sale was a box drop. The vendors cannot wash their hands from responsibility.

 

[Sinbad]

Heavy delays and congestion at durban container handling section. My container missed its boat and is now scheduled to be loaded on 9 August. Its been there since 27 July.