This week we have NIST’s vulnerabilities database offline due to being hacked and Microsoft patching a USB physical attack that takes over every version to date with just an insertion of a thumb drive. From my point of view the these two events are the endpoint on a trend line suggesting system attacks against current architectures are far from being tamed by rigorous use of contemporary defensive measures.
Given that assumption, what changes in our plans, processes, and designs, if any, should be make if it becomes a much more common event to “Nuke it from orbit”? NIST has been down for a week which suggests one of the premiere authors of such guides for best practices may have been caught flat footed.
I am looking for more detailed answers than “Do regular backups”. Obviously NIST did regular backups and had a recovery process in place but still they are stymied. I can guess at the challenges NIST is facing. I would like suggestions for best practices in a world where getting owned is a common event for internet facing or physical USB port accessible systems.
