SolarWinds
Distributed a compromised update to 18,000 customers
A build system with excessive permissions and too many trusted components turned one compromised dependency into an update every customer installed.
3 case studies tagged network segmentation.
SolarWinds
A build system with excessive permissions and too many trusted components turned one compromised dependency into an update every customer installed.
Target
Compromised HVAC vendor credentials crossed into the payment network because segmentation was not there. 40 million credit cards were stolen.
BeyondCorp replaced 'inside the building, therefore trusted' with per-request authorisation against user credentials and device state.