Kevin BeaumontKonto zweryfikowane

regardless of how massive of an undertaking upgrading struts may have been, what's really clear is "they simply didn't care about security"

if you have a huge system, and you dont plan for it ever to be upgraded, you're the problem. Stuff gets old. it needs updates. plan for it.

I could forgive a company whose core competency wasn't data management not patching a server, but seriously.

for this to have happened, whole departments of people had to not care, not plan, or at worst have NO CLUE about updates/upgrades.

My question: where were the auditors? For systemic failures like this to go unnoticed means their internal auditors also failed them

well there was that soc2 audit document that they had sat on their website that was found earlier today.. kpmg was the auditor