30k U.S. organizations newly hacked via holes in Microsoft Exchange Server
We are seriously looking at strategies for clean room rebuild of our IT infrastructure, potentially on a recurring basis via automation.<p>Obviously, you cant mitigate 0-day exploits in any situation where reasonable&#x2F;expected network access is possible. But our concern, despite not being directly impacted by this, is that we may have accumulated malware over the past decade+ that has never been discovered. How many exploits exist in the wild which have never been documented or even noticed? Do we think it&#x27;s at least one?<p>The thinking we are getting into is - If we nuke-from-orbit and then reseed from trusted backups on a recurring basis, any malware that gets installed via some side-channel would not be able to persist for as long as it traditionally would. Keeping backups pure via deterministic cryptographic schemes is far easier to work with than running 100+ security suites across your IT stack in hopes you find something naughty. It is incredibly hard for malware to hide in a well-normalized SQL database without SP or other programmatic features.<p>What if we built a new IT stack that was <i>designed</i> to be obliterated and reconstructed every 24 hours with latest patch builds each time? Surely many businesses could tolerate 1-2 hours of downtime overnight. It certainly works for the stock market. There really isn&#x27;t a reason you need to give an attacker a well-managed private island to hide on for 10+ years at a time.