Danger zone! Brit research supercomputer ARCHER's login nodes exploited in cyber-attack, admins reset passwords and SSH keys

[InfoSec News <alerts () infosecnews org>]

https://www.theregister.co.uk/2020/05/13/uk_archer_supercomputer_cyberattack/

By Gareth Corfield
The Register
13 May 2020

Updated One of Britain's most powerful academic supercomputers has fallen 
victim to a "security exploitation" of its login nodes, forcing the rewriting 
of all user passwords and SSH keys.

The intrusion, which is understood to be under investigation by GCHQ offshoot 
the National Cyber Security Centre (NCSC), rendered the ARCHER high-performance 
computing (HPC) network unavailable to its users on Tuesday.

Sysadmins warned ARCHER users that their SSH keys may have been compromised as 
a result of the apparent attack, advising them to "change passwords and SSH 
keys on any other systems which you share your ARCHER credentials with".

In a statement posted to the project's status page on Wednesday, ARCHER admins 
said it appeared several academic high-performance computers were disrupted 
across Europe in addition to the Cray-built ARCHER. They explained:

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_