Rubrik Admits To Security Incident

Cybersecurity company Rubrik disclosed recently disclosed a security incident where an unauthorized actor gained access to a server containing log files. While the company states the intrusion was limited to a single server and there’s no evidence of customer data or internal code being compromised, they did confirm that some “access information” was obtained by the threat actor. Rubrik has rotated keys as a precautionary measure, though they found no evidence this access information was misused.

If you want to go down the rabbit hole on this, the company posted a write up on this incident.

 James Winebrenner, CEO at Elisity had this comment:

“The Rubrik breach emphasizes once again that traditional network security approaches are inadequate for protecting critical business assets. While details are still emerging, the familiar pattern of initial compromise followed by lateral movement clearly highlights the urgent need for a paradigm shift in cybersecurity. Identity-based microsegmentation establishes precise, zero-trust boundaries around every resource, not just the network perimeter, which ensures users and devices only access what’s absolutely necessary. Organizations relying on legacy security models should view incidents like these as urgent signals to modernize their defenses proactively, rather than risk becoming tomorrow’s headline.”

While it does sound like that this isn’t that bad, you should consider that Rubrik were part of the massive GoAnywhere breach that the Cl0p ransomware gang was running. Thus I hope Rubrik takes this opportunity to make sure that their security is top shelf to avoid something really bad happening to them.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading