|
RANT: Why do people who are supposedly intelligent security professionals allow cloud based IaaS virtual machines that they're no longer using to simply run, unattended and unpatched, for months on end? Not only does it cost real $$, but it also leaves them wide open to whatever the latest malware is! AT LEAST SET THEM TO AUTOUPDATE for goodness sakes!
And, of course, who do they complain to at 6AM on a Monday Morning? Yup. Like I was supposed to magically know about these machines and have them patched for you. And you don't have any backups? Gee, how's that working for you?
/RANT.
(And yes, I did have a backup of it. Not because he told me about the VMs, but because I monitor that cloud account, just in case. But I made him sweat a bit before I allowed as how I might be able to help.)
|