One of the latest news this week. The U.S. Department of Defense (DoD) discovered over last weekend, that one of their servers has been sharing military emails out on the open internet for 2 weeks. (according to Tech Crunch). Ref: https://news.clearancejobs.com/2023/02/21/sf-86-and-other-sensitive-data-exposed-in-u-s-military-email-spill/
They were using cloud infrastructure and someone did not set a password for the server hosting the Microsoft Azure government cloud. This basically means anyone with the IP address for the sensitive mailbox data, or managed to discover the IP address by other methods, will be able to access the sensitive mailbox data.
Thankfully the server did not contain classified information, only sensitive information. (If you wish to know about the different classification of information type, some basic knowledge is shared on your class Miro Board – “Perspectives for Application of Psychology and Intelligence“)
That’s also one reason why infrastructure knowledge ties back with the Cybersecurity discipline, while strengthening the discipline of Software Applications/Content Development. Digital infrastructures are the digital space we build our stuff on, to host our creation. If we don’t know how to protect and assign permission rights in our digital space, someone will be able to hack/steal our creations.
Being aware, is how we defend, protect and create a safe digital space that allows us to develop better things.