Zero Trust for Software Updates

Consider network requirements when purchasing products

One of my posts on Network Security, the SolarWinds Breach, and Data Breaches.

Free Content on Jobs in Cybersecurity | Sign up for the Email List

Zero trust networking and the SolarWinds Malware

I explain things like networking, ports, and protocols in that chapter and how malware “calls home” in that chapter. This point at which malware calls home is the point where you might be able to potentially block or identify malware in your network. In the case of SolarWinds, the software first downloaded updates from the SolarWinds update server. After a some time, it attempted to communicate with an attacker-controlled host which sent additional commands to the malware.

The SolarWinds hack demonstrates how a zero trust network could help prevent some data breaches. If the hosts infected by the SolarWinds malware could not communicate with any other hosts on the Internet except those that it absolutely required to retrieve software updates, the malware would not have access to communicate with the C2 server.