Contact us today!
(518) 203-2110

Evolve IT

Evolve IT has been serving the Saratoga Springs area since 1995, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Was the NSA Hacked By Enemies Abroad, or Was It an Inside Job?

Was the NSA Hacked By Enemies Abroad, or Was It an Inside Job?

Not long ago, a group referring to itself as the Shadow Brokers distributed hacking tools utilized by the United States National Security Agency (NSA), on various publically-accessible websites. While the motives of the Shadow Brokers are a story for another time, an investigation seems to have locked in on a particular theory of how the Shadow Brokers came into possession of the tools in the first place.

Hypotheses were initially varied as to how the tools were taken from the NSA at all. Some surmised that the leak must have been the work of another agency insider following the lead of the controversial Edward Snowden. Some suspected that Russia, deemed responsible by D.C. lawmakers, had hacked into the NSA headquarters located in Fort Meade.

However, the FBI has begun to focus their efforts on an entirely different source, one that--while certainly less openly malicious than a foreign attack or insider leak--still shows the dangers that human error can present to cyber security.

Based on information provided by the NSA, investigators are looking into reports that an individual associated with the agency, either as an employee or a contractor, had left the tools on a remote computer during an operation approximately three years ago. These tools would allow their users to exploit systems from Fortinet Inc. and Cisco Systems.

Patches have since been released to help protect these systems from the now-public tools. Investigators, however, are not ruling out the possibility that the tools were left exposed on purpose, or that others within the NSA made similar mistakes that ultimately resulted in the Shadow Brokers obtaining them.

To their credit (assuming that it was an honest mistake), the unnamed individual reported their mistake shortly afterwards, according to the NSA--which, it must be mentioned, did not inform the companies of the risk to their systems. Rather, having sought out foreign use of the tools with no results, the NSA saw no need to inform the software manufacturers.

Regardless of blame for the release of these tools into the public domain, the unnamed former NSA representative who left the tools on the remote computer proves that critical data should never leave the safety measures to be found on-premises and taken into the world without considerable measures put in place to ensure its security.

For advisement and assistance in putting measures in place to protect your business from theft, call Evolve IT at (518) 203-2110.

Comments

 
No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Saturday, 26 April 2025
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Blog Archive

Free Consultation

Sign up today for a
FREE Network Consultation

How secure is your IT infrastructure?
Let us evaluate it for free!

Sign up!

Free Consultation
 

Tag Cloud

Tip of the Week Security Best Practices Technology Internet Cloud Hackers Email Privacy Productivity Malware Business Software Business Computing User Tips Hosted Solutions Microsoft Upgrade Computer Efficiency Workplace Tips Google Windows 10 IT Support Mobile Devices Innovation Smartphone Gmail Network Security Ransomware Hardware Facebook The Internet of Things Social Media Bandwidth Microsoft Office Office Backup Apps Business Continuity Disaster Recovery Communication Hacking WiFi Operating System Smartphones Android Small Business Phishing Apple App Best Practice Mobile Computing Big Data communications Safety Alert Unified Threat Management Networking Data storage Quick Tips Data Windows Experience Firewall Content Filtering Cybercrime Mobile Device Management Money Network Website Managed Service Provider Outlook Employer-Employee Relationship Wireless Technology History Two-factor Authentication Social Printer Browser Router Wireless Office 365 Virtual Desktop Unified Communications Retail Securty Saving Money Document Management Analytics Encryption VoIP intranet Law Enforcement Lithium-ion battery SaaS Managed IT services Proactive IT Cortana Social Networking Network Congestion Save Money Bluetooth Public Speaking Music IP Address Virtualization Automation Cryptocurrency Memory Laptop Government Augmented Reality Keyboard IBM Education Deep Learning User Google Docs Search Cleaning BDR Hard Drives Holiday Processors Black Market Remote Computing YouTube Shortcut LiFi Vendor Management Staffing Office Tips DDoS BYOD Heating/Cooling Downtime Word Help Desk Passwords Streaming Media Visible Light Communication Monitors Disaster Micrsooft Business Management Business Growth Data Management Advertising Displays Competition Recovery Robot Society Presentation Sports Entrepreneur Google Wallet Domains Spam Information Technology End of Support Running Cable Windows 8 Hacker Internet of Things IT Services Hosted Solution Windows XP Artificial Intelligence Writing Application Documents Tech Support Customer Service Compliance Drones
QR-Code