Comment by alephnerd

17 hours ago

There are a couple hundred US armed forces bases each with commissaries that would be managed by DeCA.

An attack like the author hypothesized would require a LOTL modus operandi, and doing so on 14 locations wouldn't justify completely blowing up an entire LOTL operation, because it exposes indicators, registers, and tradecraft that is then shared amongst all security vendors.

The way it's framed is clickbait at its worst with the added issue of limited security experience, but the same can be said of HN in general.

Or someone somehow got into one web interface (e.g. by popping a random workstation used to monitor all these sites) and clicked buttons.