The ArcGIS Hack That Turned Backups Into A Malware Repository The Backup Wrap-Up podcast

Over 20 million podcasts, powered by

Artwork

Tech Backup Centrals Restore

Content provided by W. Curtis Preston (Mr. Backup). All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by W. Curtis Preston (Mr. Backup) or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

The Backup Wrap-Up « »
The ArcGIS Hack That Turned Backups Into a Malware Repository

2M ago 25:18

Share

MP3•Episode home

Content provided by W. Curtis Preston (Mr. Backup). All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by W. Curtis Preston (Mr. Backup) or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

This episode examines a sophisticated ArcGIS hack that remained undetected for 12 months. The threat group Flax Typhoon compromised an ArcGIS server by exploiting weak credentials and deploying a malicious Java extension that functioned as a web shell. The attack highlights critical failures in traditional security approaches: the malware was backed up along with legitimate data, signature-based detection tools completely missed the custom code, and the lack of multi-factor authentication made the initial breach possible. Curtis and Prasanna discuss why behavioral detection is now mandatory, how password length trumps complexity, and the importance of cyber hygiene practices like regular system audits and extension management. They also cover ReliaQuest's recommendations for preventing similar attacks, including automated response playbooks and monitoring for anomalous behavior. If you're running public-facing applications or managing any IT infrastructure, this episode provides actionable lessons you can't afford to ignore.

https://reliaquest.com/blog/threat-spotlight-inside-flax-typhoons-arcgis-compromise

… continue reading

329 episodes

#Tech #Backup Centrals Restore

Artwork

The ArcGIS Hack That Turned Backups Into a Malware Repository

The Backup Wrap-Up

published 2M ago

Share

MP3•Episode home

Content provided by W. Curtis Preston (Mr. Backup). All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by W. Curtis Preston (Mr. Backup) or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

This episode examines a sophisticated ArcGIS hack that remained undetected for 12 months. The threat group Flax Typhoon compromised an ArcGIS server by exploiting weak credentials and deploying a malicious Java extension that functioned as a web shell. The attack highlights critical failures in traditional security approaches: the malware was backed up along with legitimate data, signature-based detection tools completely missed the custom code, and the lack of multi-factor authentication made the initial breach possible. Curtis and Prasanna discuss why behavioral detection is now mandatory, how password length trumps complexity, and the importance of cyber hygiene practices like regular system audits and extension management. They also cover ReliaQuest's recommendations for preventing similar attacks, including automated response playbooks and monitoring for anomalous behavior. If you're running public-facing applications or managing any IT infrastructure, this episode provides actionable lessons you can't afford to ignore.

https://reliaquest.com/blog/threat-spotlight-inside-flax-typhoons-arcgis-compromise

… continue reading

329 episodes

#Tech #Backup Centrals Restore

All episodes

×

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

Listen to 500+ topics

Help/FAQ | Advertise with Us

Arts|Business|Comedy|Economics|Entertainment|News|Politics|Religion

Science|Soccer|Sports|Storytelling|Technology|True Crime

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright

Listen to this show while you explore