If you haven't heard, Binance, the world's largest crypto exchange, had about 6.3 BILLION us dollars syphoned in a hack.
How? Apparently the compromised laptop of a devops engineer (i think theyve said it might be other stuff too but there's no details yet)
Can I just say I am tired. Like I am so tired, how did your employee's laptop get compromised. Why is your fucking devops engineer using their work laptop with administrative credentials for literally anything that could compromise it. Why can one individual do all this shit with so little accountability and oversight that 6 fucking billion dollars get pulled. What happened to break glass safety measures, are those none existent or so weak they do fucking nothing?
I saw a thing on a bbc article about this, quoting some dude from a fucking AI company saying "well if you dupe the guy with the key from a vault it doesn't matter how good the vault is". I'm sorry? The whole point of blue team practice is that you in fact can't trust any of your stuff, i cluding the "guy with the keys". This is fucking insane, just shut the fuck up
