Contact us today!
(518) 203-2110

Evolve IT

Evolve IT has been serving the Saratoga Springs area since 1995, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Was the NSA Hacked By Enemies Abroad, or Was It an Inside Job?

Was the NSA Hacked By Enemies Abroad, or Was It an Inside Job?

Not long ago, a group referring to itself as the Shadow Brokers distributed hacking tools utilized by the United States National Security Agency (NSA), on various publically-accessible websites. While the motives of the Shadow Brokers are a story for another time, an investigation seems to have locked in on a particular theory of how the Shadow Brokers came into possession of the tools in the first place.

Hypotheses were initially varied as to how the tools were taken from the NSA at all. Some surmised that the leak must have been the work of another agency insider following the lead of the controversial Edward Snowden. Some suspected that Russia, deemed responsible by D.C. lawmakers, had hacked into the NSA headquarters located in Fort Meade.

However, the FBI has begun to focus their efforts on an entirely different source, one that--while certainly less openly malicious than a foreign attack or insider leak--still shows the dangers that human error can present to cyber security.

Based on information provided by the NSA, investigators are looking into reports that an individual associated with the agency, either as an employee or a contractor, had left the tools on a remote computer during an operation approximately three years ago. These tools would allow their users to exploit systems from Fortinet Inc. and Cisco Systems.

Patches have since been released to help protect these systems from the now-public tools. Investigators, however, are not ruling out the possibility that the tools were left exposed on purpose, or that others within the NSA made similar mistakes that ultimately resulted in the Shadow Brokers obtaining them.

To their credit (assuming that it was an honest mistake), the unnamed individual reported their mistake shortly afterwards, according to the NSA--which, it must be mentioned, did not inform the companies of the risk to their systems. Rather, having sought out foreign use of the tools with no results, the NSA saw no need to inform the software manufacturers.

Regardless of blame for the release of these tools into the public domain, the unnamed former NSA representative who left the tools on the remote computer proves that critical data should never leave the safety measures to be found on-premises and taken into the world without considerable measures put in place to ensure its security.

For advisement and assistance in putting measures in place to protect your business from theft, call Evolve IT at (518) 203-2110.

Comments

 
No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Thursday, 03 April 2025
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Blog Archive

Free Consultation

Sign up today for a
FREE Network Consultation

How secure is your IT infrastructure?
Let us evaluate it for free!

Sign up!

Free Consultation
 

Tag Cloud

Tip of the Week Security Technology Internet Best Practices Cloud Hackers Privacy Email Productivity Malware Business Business Computing Software User Tips Google Computer Hosted Solutions Microsoft Upgrade Efficiency Workplace Tips Innovation Smartphone Windows 10 IT Support Mobile Devices Gmail Network Security Ransomware Hardware Business Continuity Operating System Disaster Recovery Communication Hacking The Internet of Things WiFi Social Media Facebook Bandwidth Microsoft Office Office Backup Apps Website Wireless Technology Android Apple Employer-Employee Relationship Best Practice History Two-factor Authentication Alert Small Business Phishing Networking Smartphones Data storage App Data Windows Mobile Computing Experience communications Big Data Safety Unified Threat Management Quick Tips Money Mobile Device Management Network Firewall Managed Service Provider Outlook Content Filtering Cybercrime Tech Support Compliance Monitors Drones Competition Presentation Social Entrepreneur Printer Browser Displays Domains Virtual Desktop Wireless Securty Hacker Unified Communications Document Management Encryption End of Support Law Enforcement Application SaaS VoIP Customer Service Proactive IT Cortana Writing Network Congestion Save Money Router Music Office 365 Laptop Saving Money Analytics Cryptocurrency Lithium-ion battery intranet IBM Retail Google Docs Education Holiday Cleaning Black Market YouTube Social Networking Processors Managed IT services Office Tips Public Speaking LiFi Staffing Virtualization Downtime IP Address BYOD Passwords Streaming Media Help Desk Bluetooth Micrsooft Visible Light Communication Government Disaster Keyboard Automation Augmented Reality Search Business Growth User Data Management Memory Robot Hard Drives Advertising Recovery Shortcut Sports Deep Learning Remote Computing Society DDoS Google Wallet Spam BDR Heating/Cooling Information Technology Word Running Cable Windows 8 Internet of Things Vendor Management Hosted Solution Windows XP IT Services Documents Artificial Intelligence Business Management
QR-Code