regreSSHion (CVE-2024-6387): Patch OpenSSH, Then Reduce Its Exposure
July 2, 2024The CrowdStrike Outage: A Global Reminder That Resilience Is Not Optional
July 19, 2024By mid-July 2024, the scope of the attacks against Snowflake customer accounts had grown, with more organizations disclosing that data had been exported from cloud environments accessed using stolen credentials. The through-line was simple and repeated: accounts protected by a password alone, no multi-factor authentication, and few restrictions on where a login could come from.
The perimeter has moved to identity
For most Canadian organizations, the old model of a hard network edge is gone. Data lives in SaaS and cloud platforms reachable from anywhere. In that world, an attacker with a valid login is inside, full stop. Zero Trust is the practical answer: never assume a session is legitimate just because it presented the right password.
What Zero Trust looks like in practice
- Phishing-resistant MFA everywhere, including admin and service accounts.
- Conditional access that evaluates device health, location, and risk on every authentication.
- Least privilege, so an account cannot export the entire warehouse.
Takeaway: These breaches were the predictable result of treating a password as sufficient proof of identity. Adopt phishing-resistant MFA and assume every login could be an intruder holding a stolen key.