Let it not be said I don’t pay attention to other countries on this show. The French national cyber-security agency has linked a series of breaches of French IT providers over a four-year time span. The source of the breaches have not been determined – either in Centreon IT monitoring software or a possible supply chain breach. Centreon describes itself as a AIOps-ready IT monitoring service that provide visibility to complex IT workflows from the cloud to the edge.
This is like a mini SolarWinds. Hackers see a way in via IT monitoring software, and the French agency is still looking to figure out how it happened. Mini SolarWinds. Another version. Call it what you will, but it’s the same.
And that’s why we care. Are you monitoring the monitor? Do you implicitly trust them? And if so… why?
Source: Reuters