@itmedg@WoganMay@AvaSantina But you have no idea yet of initial access, how it happened, what the circumstances were. Everything is conjecture until proven. Maybe await the company or some other trusted avenue of information before summising
@itmedg@WoganMay@AvaSantina Why do you think ASOS uses no multi factor authentication or segmented account for pam? (Plot twist, they do and they are generally very good at it)
@LisaForteUK Very well said Lisa. I know many of the ASOS infosec team more than most and they are a professional and competent bunch. We are all only a click or a phone call from cyber disaster.