There needs to be an appetite for Article 5 to be invoked. We don't need to explosively defend the NATO nations (yet), but we need to be willing to show Russia that we won't fuck around. All the airliner bomb threats and refrigeration hacks aren't just coincidentally happening at the same time right after NATO warned Russia would be pulling more shit.
Unfortunately, nobody wants to invoke article 5 because that would involve the United States and regardless of the midterms results, the US is not in a place right now where it can get involved in something like this.
And then individual countries don’t want to pull the trigger because that puts them in the crosshairs of Russia and it’s politically unpopular at a time where most countries are looking at austerity measures and then suddenly more defence spending is like… what?
As someone working in security, it's frustrating that this is a solved problem and has been recognised for years if not over a decade, but it hasn't received the attention it deserves.
The problem is, for the longest time working in IT was a case of "make it work" and putting security in place is literally putting things in place which make "making it work" harder and take longer, so it didn't happen.
I do security for one of these old-school industries and it really has been a wake-up call in the past couple of years to get on top of this stuff.
PCI-DSS, the governing regulations for safe usage of cardholder data, do not mess around with this. If a company is required to comply with PCI, storing cardholder data unencrypted holds a fine of between 5k-100k per month until the problem is fixed.
Which doesn't sound like a lot for a massive company, but repeated/persistent violations can lead to legal penalties or being dropped by banks as a safe payment processor.
I don't know the specifics of this example, and the standards have changed over time, but I would be running to the CIO if I saw something like that today.
After the supermarket refrigeration systems now the blood storage refrigeration systems were hit.
France's national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at three of its facilities, threatening stored blood products.
The French Blood Establishment (Établissement français du sang or EFS), which manages blood collection, processing, and distribution across France, said the incident occurred on November 2 and affected systems used to monitor and control cold-storage chambers.
According to a statement published on November 3, EFS was not directly targeted in the cyberattack, but was instead its refrigeration supplier.
While EFS has not named the affected supplier, European refrigeration equipment provider Coolworld Rentals confirmed in a statement that a cybersecurity incident involving remote monitoring software had affected a limited number of its refrigeration units.
Adys | 22 hours ago
I’m gonna start repeating it in every thread:
Europe is at war.
Thanks for coming to my ted talk, please like and subscribe…
updawg | 21 hours ago
There needs to be an appetite for Article 5 to be invoked. We don't need to explosively defend the NATO nations (yet), but we need to be willing to show Russia that we won't fuck around. All the airliner bomb threats and refrigeration hacks aren't just coincidentally happening at the same time right after NATO warned Russia would be pulling more shit.
They're calling our bluff.
Adys | 21 hours ago
Unfortunately, nobody wants to invoke article 5 because that would involve the United States and regardless of the midterms results, the US is not in a place right now where it can get involved in something like this.
And then individual countries don’t want to pull the trigger because that puts them in the crosshairs of Russia and it’s politically unpopular at a time where most countries are looking at austerity measures and then suddenly more defence spending is like… what?
archevel | 23 hours ago
First I thought: this is going to kill someone. But I was reassured by:
So there is that silver lining at least.
[OP] riQQ | 23 hours ago
At least now, but something as important as blood reserves should be secured better.
infpossibilityspace | 22 hours ago
As someone working in security, it's frustrating that this is a solved problem and has been recognised for years if not over a decade, but it hasn't received the attention it deserves.
The problem is, for the longest time working in IT was a case of "make it work" and putting security in place is literally putting things in place which make "making it work" harder and take longer, so it didn't happen.
I do security for one of these old-school industries and it really has been a wake-up call in the past couple of years to get on top of this stuff.
BeardyHat | 22 hours ago
Previous company I was a SysAdmin for stored customer credit card data in plain text. But it wasn't a priority to fix it.
d32 | 21 hours ago
I'm pretty sure that's illegal... Or at least "not certifiable"?
MimicSquid | 21 hours ago
Catching is before hanging, and a potential cost in the future is better than an actual cost now, when all you care about is this quarter's numbers.
infpossibilityspace | 16 hours ago
PCI-DSS, the governing regulations for safe usage of cardholder data, do not mess around with this. If a company is required to comply with PCI, storing cardholder data unencrypted holds a fine of between 5k-100k per month until the problem is fixed.
Which doesn't sound like a lot for a massive company, but repeated/persistent violations can lead to legal penalties or being dropped by banks as a safe payment processor.
I don't know the specifics of this example, and the standards have changed over time, but I would be running to the CIO if I saw something like that today.
[OP] riQQ | 23 hours ago
After the supermarket refrigeration systems now the blood storage refrigeration systems were hit.
Previously