3 ms·
Lack of which security measures might lead to this?
by subsidd 9y ago
Lack of which security measures might lead to this?
- crivabene 9y agoIn the post they mention the probable cause is a developer account which got compromised. One of the most important rules of most security frameworks (including PCI DSS) is segregating access between development and production: developers are not supposed to be able to access production data. I suppose this rule was not followed here - or an alternative mitigating control (which can be applied instead of the rule above) was not good enough to prevent this.