On September 10, MGM Resorts experienced what it called a "cybersecurity issue" that had a major impact on the company's systems, showing how cyberattacks can bring down applications, ultimately causing problems for a company in many ways.
According to Forbes, "The attack left hotel guests locked out of their rooms for hours and unable to use their digital key cards to charge goods and services. Eventually, the hotels resorted to manual processes and transactions."
The attack was first noticed by MGM Resorts on the evening of September 10. About 24 hours later the casinos were operational but the reservation systems was still down.
The company's website was also offline for at least 2 days.
In addition, the cyberattack impacted the MGM Rewards App and gaming on the casino floors. Las Vegas TV station KTNV reported, "Multiple gaming machines, including slot machines, have also gone offline due to the cybersecurity issue."
MGM Resorts has not yet disclosed which specific systems were impacted, and some of the downtime could be a result of the company shutting down its own systems to protect them, but the end result is still a disaster for the company. This attack shows how pervasive a cyberattack can be throughout a business operation.
In the latest episode of the Cybersecurity Awesomeness Podcast on DEVOPSdigest, Rick Sturm, CEO and Founder of Enterprise Management Associates (EMA) gave a stern warning to companies of all sizes. While speaking not specifically about MGM Resorts but more about cybersecurity in general, he said, "This stuff is rooted, to some extent, in corporate greed. Where management is always an afterthought, and security is even worse than that, it's way, way down. And we can save gazillions of dollars by connecting to the ... Internet, and security be damned, nobody will try to get in. And besides, we've got a couple firewalls. That should do it, right? No, it's not right ... We are seeing this over and over and over, and yet organizations are not taking the precautions that they need to. They take the quick and easy fix — they think. And ultimately, if you are connected to the Internet, you will be hacked, whether you're large or small."
On the podcast, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA added, "From the perspective of the network engineering team, it points to the fact that people don't have a lot of control over what's happening within their network. They don't see what's happening. It's about access control and segmentation. Like limiting lateral movement. Having a lot granular control over who can talk to what inside inside your network, and being able to understand if some kind of anomaly is popping up in terms of connections and communication. It requires a lot of manual heavy lifting from a network engineering team to be able to lock things down completely. And no one does it. As Rick was saying, part of it's greed, like no one wants to spend the money on it. Part of it is they don't have the tools to do it. And another part of it is they don't have the people to do it … It's a problem that needs to be solved."
Listen to Episode 27 of the Cybersecurity Awesomeness Podcast for more of EMA's take on the MGM Resorts cyberattack.
The Latest
Broad proliferation of cloud infrastructure combined with continued support for remote workers is driving increased complexity and visibility challenges for network operations teams, according to new research conducted by Dimensional Research and sponsored by Broadcom ...
New research from ServiceNow and ThoughtLab reveals that less than 30% of banks feel their transformation efforts are meeting evolving customer digital needs. Additionally, 52% say they must revamp their strategy to counter competition from outside the sector. Adapting to these challenges isn't just about staying competitive — it's about staying in business ...
Leaders in the financial services sector are bullish on AI, with 95% of business and IT decision makers saying that AI is a top C-Suite priority, and 96% of respondents believing it provides their business a competitive advantage, according to Riverbed's Global AI and Digital Experience Survey ...
SLOs have long been a staple for DevOps teams to monitor the health of their applications and infrastructure ... Now, as digital trends have shifted, more and more teams are looking to adapt this model for the mobile environment. This, however, is not without its challenges ...
Modernizing IT infrastructure has become essential for organizations striving to remain competitive. This modernization extends beyond merely upgrading hardware or software; it involves strategically leveraging new technologies like AI and cloud computing to enhance operational efficiency, increase data accessibility, and improve the end-user experience ...
AI sure grew fast in popularity, but are AI apps any good? ... If companies are going to keep integrating AI applications into their tech stack at the rate they are, then they need to be aware of AI's limitations. More importantly, they need to evolve their testing regiment ...
If you were lucky, you found out about the massive CrowdStrike/Microsoft outage last July by reading about it over coffee. Those less fortunate were awoken hours earlier by frantic calls from work ... Whether you were directly affected or not, there's an important lesson: all organizations should be conducting in-depth reviews of testing and change management ...
In MEAN TIME TO INSIGHT Episode 11, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses Secure Access Service Edge (SASE) ...
On average, only 48% of digital initiatives enterprise-wide meet or exceed their business outcome targets according to Gartner's annual global survey of CIOs and technology executives ...
Artificial intelligence (AI) is rapidly reshaping industries around the world. From optimizing business processes to unlocking new levels of innovation, AI is a critical driver of success for modern enterprises. As a result, business leaders — from DevOps engineers to CTOs — are under pressure to incorporate AI into their workflows to stay competitive. But the question isn't whether AI should be adopted — it's how ...
