I would expect/hope that all egress traffic from the agents in these tests would have to go through a MITM proxy layer, which intercepts and logs all network traffic attempts.
The failure is likely in detection, where they assumed traffic to internal systems (eg. Artifactory) was inherently safe. Which is a daft assumption at this point.
Comments
I would expect/hope that all egress traffic from the agents in these tests would have to go through a MITM proxy layer, which intercepts and logs all network traffic attempts.
The failure is likely in detection, where they assumed traffic to internal systems (eg. Artifactory) was inherently safe. Which is a daft assumption at this point.