this post was submitted on 10 May 2024
192 points (98.5% liked)
Technology
59299 readers
6928 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It is but Law Enforcement and Healthcare I.T. can't keep up with the growing number of threats and threat actors. From the perspective of someone in Healthcare I.T. I've watched lots of money, time, and effort get spent on securing systems but it's never quite enough and it never happens fast enough.
MFA all the things, HIPS on everything, EDR on everything, Zero Trust everything, regular patching of all systems, High End Firewalls, encrypt all the things, bi-annual security reviews, DNS Filtering, regular network sweeps for unknown or unmanaged equipment...and you can still end up getting whacked by a 0 Day exploit in a commercial helpdesk tool. (This is what got Change / Optum).
The criminals typically belong to overseas hacking groups, many of which are in places that Western Law Enforcement can't reach like Russia, Belarus, China, and North Korea.
It's a nearly impossible challenge and it's never going to end as long as these systems have any path to the public internet.