3 ms·

additional statement from CTO Charles Clancy and cybersecurity engineer Lex Crumpton: https://medium.com/mitre-engenuity/advanced-cyber-threats-impact-even-the

• keepamovin 3y ago
  How serious was this? As someone close to it do you have a picture? :)
  • MichaelZuo 3y ago
    Considering the quote:"MITRE followed best practices, vendor instructions, and the government’s advice to upgrade, replace, and harden our Ivanti system, but we did not detect the lateral movement into our VMware infrastructure. At the time we believed we took all the necessary actions to mitigate the vulnerability, but these actions were clearly insufficient." It seems like anything connected to it was fully compromised for quite some time.
• collsni 3y ago
  Based on this I'd say they didn't realize until some suspicious VMs started popping up... Wonder what their time to detect was