Barracuda thought it drove 0-day hackers out of customers’ networks. It was wrong. (arstechnica.com)
from tedu to cloudsec on 31 Aug 2023 01:54
https://azorius.net/g/cloudsec/p/1gVpVq9yXqZ3JC1Z9R-Barracuda-thought-it-drove-0day-hackers-out-of-c

The hackers’ uncanny ability to reinfect their targets solves a mystery from early last month. A June 6 update to the company’s ongoing security advisory no longer recommended patching as a viable means of remediation. Instead, it advised the “immediate replacement of compromised ESG appliances, regardless of patch level.” Until now, the reasoning for the unusual recommendation was unclear.

#cloudsec