• DanceMomsSavedMe@lemmy.zip
    link
    fedilink
    arrow-up
    21
    ·
    1 day ago

    Can you imagine a company like CEVA making millions upon millions of dollars year over year and not spending any of that for security?

    • thingsiplay@lemmy.ml
      link
      fedilink
      arrow-up
      51
      ·
      1 day ago

      Who says they don’t spend any of that for security? Security is not reached by just throwing with money. We don’t know the details how this happened. So I would be careful with premature conclusions like that.

      • funkless_eck@sh.itjust.works
        link
        fedilink
        arrow-up
        4
        ·
        20 hours ago

        it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take

        we don’t know what happened but freightwaves is reporting it was at the warehouse level so I’m guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address

        knowing they run a proprietary blend of cargowise freight tech it’s likely the hackers got access to a regional managers account, probably pretty low on the totem pole

        • thingsiplay@lemmy.ml
          link
          fedilink
          arrow-up
          27
          ·
          1 day ago

          You still don’t know how much they spend and how the attack was done. Often security isn’t even a matter of money, but knowledge and trust of your own teammates. Maybe you are right after all, but my point is, we don’t know YET.

          • a4ng3l@lemmy.world
            link
            fedilink
            arrow-up
            5
            ·
            1 day ago

            Exactly. It only takes one printed picking list not shredded correctly and some asshole dumpster diving and there it goes. Or a wrongly formatted mail recipient… so many ways for humans to fail it’s funny to always see security reduced to technical measures.

    • Lai0602p@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      1 day ago

      There are also attacks like an employee attacking his/her own company (pump.fun), or simply corruption…