HPE says hackers breached Aruba Central using stolen access key

guest · Nov 10, 2021

HPE says hackers breached Aruba Central using stolen access key
November 10, 2021
https://www.bleepingcomputer.com/ne...eached-aruba-central-using-stolen-access-key/

HPE has disclosed that data repositories for their Aruba Central network monitoring platform were compromised, allowing a threat actor to access collected data about monitored devices and their locations.

Aruba Central is a cloud networking solution that allows administrators to manage large networks and components from a single dashboard.
Click to expand...

HPE disclosed today that a threat actor obtained an "access key" that allowed them to view customer data stored in the Aruba Central environment. The threat actor had access for 18 days between October 9th, 2021, and October 27th, when HPE revoked the key.

"One dataset ("network analytics") contained network telemetry data for most Aruba Central customers about Wi-Fi client devices connected to customer Wi-Fi networks. A second dataset ("contact tracing") contained location-oriented data about Wi-Fi client devices including which devices were in proximity to other Wi-Fi client devices," explains an Aruba Central FAQ about the security incident.
Click to expand...

As HPE's FAQ mentioned the word 'buckets' multiple times, a threat actor likely obtained the access key for a storage bucket used by the platform.

HPE states that they are changing how they protect and store access keys to prevent future incidents.
Click to expand...

Log in or Sign up

HPE says hackers breached Aruba Central using stolen access key

guest Guest

Log in or Sign up

HPE says hackers breached Aruba Central using stolen access key

guest Guest

Useful Searches