![\"Security](\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/09\/Hacker-New-Image-Mod.jpg\")
<\/p>\n<\/p>\n
Verkada, a security start-up focused on cloud-based security cameras, disclosed suffering a major security breach; hackers gained access to over 150,000 security cameras. These cameras include those in Tesla factories, Cloudflare offices, Equinox gyms, hospitals, jails, schools, and police stations.\u00a0<\/span><\/p>\n Surprisingly, the hackers behind the attack actually announced their culpability on Twitter: Tillie Kottmann of the APT 69420 Arson Cats (a hacker collective) stated the intention was to demonstrate the vulnerability of the cloud-based cameras. Additionally, the group claims to have gained access to Verkada\u2019s full video archive for all of its customers.\u00a0<\/span><\/p>\n According to <\/span>reports<\/span><\/a>, the hacker group gained this access via a privileged account, the username and password of which was available publicly on the Internet. This granted them the root access necessary to conduct the cyber-attack. At the time of writing, Verkada is attempting to regain control over their live feeds and archive.\u00a0<\/span><\/p>\n For further perspective on this breach, which raises both identity management<\/a> and physical security issues, we consulted some cybersecurity experts.\u00a0\u00a0\u00a0<\/span><\/p>\n Ray Canzanese is Director of <\/span><\/i>Netskope Threat Labs<\/span><\/i><\/a>.<\/span><\/i><\/p>\n \u201cUnfortunately, we see a lot of companies who don\u2019t apply multi-factor authentication to super-admin accounts with root privileges. This type of hack is preventable if companies have tighter control over super admin credentials to prevent leaks, use multi-factor authentication to prevent leaked or stolen credentials from being used, and monitor access to detect things like failed log-in attempts which can be a precursor to unauthorized access. These types of attacks are becoming more common as more organizations move to cloud and don\u2019t have the policies or measures in place to secure a cloud-first environment.\u201d<\/span><\/p>\n Patrick Hunter is Sales Engineering Director for EMEA at <\/span><\/i>One Identity<\/span><\/i><\/a>.<\/span><\/i><\/p>\n \u201cEvery computer system in the cloud has one major weakness. In the case of Verkada, they are holding data that has the most public shock factor, video surveillance. What did Verkada do wrong? They allegedly didn\u2019t have control over the one account they needed to. It is possible that the account wasn\u2019t monitored and that the password wasn\u2019t regularly changed on a rotation basis, but the biggest error was underestimating the power of one single account to undo their business and grant access to everyone\u2019s data. At the very least, there should have been some form of multi-factor authentication or password vault to protect the account. Whenever an admin accessed it, they would have to prove that they were who they said they were, which is a simple, cheap, and effective first line of defense.<\/span><\/p>\n Locking away the password completely in a vault is one solution and the admins have to \u201cbreak glass\u201d to get it out, or even better just offer the admins a session that they can use without ever knowing a password. This makes it more difficult to hack as no one knows the password and it will be encrypted in a deeply secured vault. Password vault and session management systems like this are almost mandatory in today\u2019s GDPR embrace and there is no excuse for ignorance. Anyone that stores their data on the internet has to expect their security to be tested at some point. You cannot keep your head in the sand and take the risk anymore, as fines and repercussions have real teeth.\u201d<\/span><\/p>\n Garret Grajek is CEO of <\/span><\/i>YouAttest<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n \u201cThough there are advanced state groups attacking our systems as SolarWinds and the Accellion attack surely demonstrate, the Verkada breach does not appear to be one of them. \u00a0 What enterprises need to understand is we need to start with security 101. That starts with changing ALL default passwords, especially the admin account passwords. A quantified\/verified system to manage and change these passwords is recommended as is turning on two-factor authentication when possible.\u201d<\/span><\/p>\n \u201cWe simply cannot make it this easy for hackers to enter our systems. We must remember – all our systems are being scanned all the time. Especially if a system has a published vulnerability.\u201d<\/span><\/p>\n Saryu Nayyar (she\/her) is CEO of <\/span><\/i>Gurucul<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n \u201cThe Verdaka breach appears to stem from inadvertently leaving an Admin level password exposed. If true, it points to a policy failure and a lack of adequate access controls. While the attackers claim to be up to a bit of mischief rather than disruptive crime, it is still illegal.<\/span><\/p>\n Verdaka will need to review their access policies and their security stack to make sure they have the right defenses in place, including security analytics, to make sure another breach like this doesn’t happen in the future.”<\/span><\/p>\n Bryson Bort is CEO of <\/span><\/i>SCYTHE<\/span><\/i><\/a>.\u00a0<\/span><\/i><\/p>\n \u00a0\u201cThis happened because of an insider threat. Employees at Verdaka had Super Admin privileges which allowed them access to all cameras\u2014 this means they could spy on customer feeds without their knowledge. The Super Admin password was leaked publicly. This is an example of bad security practices and the erosion of trust and privacy with customers. Customers depend on companies to do the right thing with ubiquitous always-on and connected devices because there is no way for them to know what\u2019s really happening.\u201d<\/span><\/p>\n Thanks to these experts for their time and expertise on the Verkada breach. For more, check out the Solutions Review Identity Management Buyer’s Guide<\/a> or the Solutions Suggestion Engine<\/a>.<\/p>\n Verkada, a security start-up focused on cloud-based security cameras, disclosed suffering a major security breach; hackers gained access to over 150,000 security cameras. These cameras include those in Tesla factories, Cloudflare offices, Equinox gyms, hospitals, jails, schools, and police stations.\u00a0 Surprisingly, the hackers behind the attack actually announced their culpability on Twitter: Tillie Kottmann of […]<\/p>\n","protected":false},"author":41,"featured_media":4581,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,16,11,1522,1204,76,425,1644,473,91,1645,1646,1626],"acf":[],"yoast_head":"\n\t\t\t![\"IAM](\"https:\/\/solutionsreview.com\/identity-management\/files\/2021\/02\/Identity_Suggestion_Engine_Horiz_800.gif\" "\\"\\"")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nExpert Commentary on the Verkada Breach<\/b><\/h2>\n
Ray Canzanese<\/b><\/h3>\n
Patrick Hunter<\/b><\/h3>\n
Garret Grajek<\/b><\/h3>\n
Saryu Nayyar<\/b><\/h3>\n
Bryson Bort<\/b><\/h3>\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"