Their future narrative for the crash?
Maybe just up too late. Read this as I’m dozing off. Mentions a major Microsoft software vulnerability and meeting with various corporate heads (financial sector too) to warn of malicious hacking. And the nefarious actors had at least a 1 week head start.Link through Apple News, then CNN article
Posted Dec 14, 2021, 6:28 AM UTC
whatever it is it will take bad things and place blame externally
one of those things might be wall st
another will be china
russia
etc
"This vulnerability is one of the most serious that I've seen in my entire career, if not the most serious," Jen Easterly, director of the US Cybersecurity and Infrastructure Security Agency (CISA), said on a phone call shared with CNN. Big financial firms and health care executives attended the phone briefing.
"We expect the vulnerability to be widely exploited by sophisticated actors and we have limited time to take necessary steps in order to reduce the likelihood of damaging incidents," Easterly said.
...
The vulnerability is in Java-based software known as "Log4j" that large organizations, including some of the world's biggest tech firms, use to log information their applications. Tech giants like Amazon Web Services and IBM have moved to address the bug in their products.
It offers a hacker a relatively easy way to access an organization's computer server. From there, an attacker could devise other ways to access systems on an organization's network.
The Apache Software Foundation, which manages the Log4j software, has released a security fix for organizations to apply.
...
Chinese-government linked hackers have already begun using the vulnerability, according to Charles Carmakal, senior vice president and chief technology officer for cybersecurity firm Mandiant. Mandiant declined to elaborate on what organizations the hackers were targeting.
...
"This will be a multiweek process where new actors are exploiting the vulnerability," Eric Goldstein, CISA's executive assistant director for cybersecurity, said on the phone call.
The ubiquity of the software forced cybersecurity professionals around the country to spend the weekend checking if their systems are vulnerable. "For most of the information technology world, there was no weekend," Rick Holland, chief information security officer at cybersecurity firm Digital Shadows, told CNN. "It was just another long set of days."