Thread

1. htrp · 1790105666 · focus · HN ↗

   TLDR. A Peoplesoft (Oracle HR) instance was compromised which allowed movement into GovCloud (AWS)

   1. ok123456 · 1790108525 · focus · HN ↗

      PeopleSoft 0-day.

      Just goes to show that the wall of IT bureaucracy does nothing. I'm sure they had an ATO, a several-hundred-page SBOM, compliance audits, etc.

      1. lenerdenator · 1790108864 · focus · HN ↗

         It doesn't do nothing. It does make things somewhat harder to attack.

         There was a time, 25-ish years ago, where exploits were thrown about like candy at a parade. The procedures you mention, along with other things, have made zero-days like these more valuable than gold.

         1. ok123456 · 1790184321 · focus · HN ↗

            > It doesn't do nothing.

            Yeah, it's called regulatory capture.

            Treating security as an accounting exercise has never stopped a 0-day. Better software tools and practices have.

Unofficial Hacker News client; not affiliated with Y Combinator.