The Olympics from an IT perspective: behind the scenes

Back to page
Newsletter
Mélanie Lebrun
31/7/2024

Hello ️🏊🏼♂️🏐🏓,

Welcome back to the July edition of the IT Recap.

Not surprisingly, I'm going to tell you about the Olympics!

📅 Today's agenda:

Youzee at the Olympics
  • When the attack isn't where you expect it to be
  • Game reruns
  • Temporary ISD
  • CrowdStrike
  • The miscellaneous section
  • Cyberattacks of the month
  • News at Youzer

👉 Go !!

Before we start, I invite you to follow us 👉

­

🚄 When the attack isn't where you expect it to be

For the launch of the Olympic Games, France had prepared for every possible scenario of cyber-attack.

As a reminder, here is a history of cyberattacks during previous editions:

  • The Athens Games in 2004 marked the beginning of cyberattacks, and organizers realized that this would become a major issue in future editions.
  • The 2008 Beijing Games saw an increase in fake ticket resale sites creating phishing traps.
  • The 2012 London Games saw an exponential number of cyber attacks (212 million at the opening ceremony).
  • Pyeongchang 2018 sees its opening ceremony disrupted by malware that renders certain systems inaccessible.
  • Finally, Tokyo in 202(1) faces 450 million cyberattack attempts at its opening!

We were worried about the Paris ceremony. It went well, but that doesn't mean we've won everything, and we need to remain extra vigilant.

What nobody talked about, however, were the physical acts of malice. We saw acts of sabotage on the SNCF network on July 26, the day of the opening ceremony. Then, on July 29, there were acts of sabotage on fiber optic lines in nine départements. The cables were cut flush, leaving little room for rapid repair.

From now on, we'll need to be on all fronts to protect ourselves.

⚠️ The attacks have not been clearly claimed (and don't seem to be linked to Russia at all) and the image below is just a joke that made me laugh at the opening ceremony. Yes, in Paris we're well into our 2nd month of monsoon after 5 months of rain... 😭

Humorous image on the opening of the Paris 2024 Olympics

Receive the best IT news of the month.
Market trends, IT trends, cyberattacks in France... a summary of the news

Receive IT news

🏊🏼‍♂️ Game reruns

For the Paris 2024 Olympic Games, Alibaba Cloud and Olympic Broadcasting Services (OBS) have launched OBS Live Cloud 3.0, an innovative broadcast service. This platform enables two-thirds of broadcasters to retrieve video streams directly via the Alibaba Cloud, rather than via satellite as was previously the case.

OBS Live Cloud transmits all feeds to the International Broadcast Center (IBC) at Le Bourget, then sends them either directly to the editing teams on site, or to an Alibaba Cloud datacenter in Frankfurt.

This cloud-based system offers greater flexibility and efficiency than satellite broadcasting, while maintaining comparable performance in terms of global distribution speed.

Source : LeMagIT, Sportbuzzbusiness

Olympics management by Alibaba cloud

🧑🏼‍💻 The temporary DSI for the Olympic Games

Bruno Marie-Rose, former sprinter and COJOP's Director of Technology and Information Systems, has been leading IT preparations since 2018, but he knows that all IS must disappear after the Games!

Atos has been an IT partner of the JOP since 1992, orchestrating interactions with other technology partners such as Orange, Cisco and Alibaba Cloud.

The majority of systems are ephemeral, with the exception of some such as the Olympic Management System (OMS) and the Olympic Diffusion System (ODS), which manage transversal functions and the dissemination of sports results.

In terms of security, sensitive data (registrations, accreditations) are hosted in a private French cloud, while results feeds are on Alibaba Cloud.

ANSSI and CNIL monitor systems and take action against cyber-attacks.

Over 250,000 hours of testing were carried out, including tests at the Integration Testing Lab (ITL) in Madrid and full-scale test events.

Specific tests are carried out for disciplines such as triathlon and fast transitions between sporting events.

The Technology Operation Center (TOC) in Saint-Denis oversees operations during the Games, assisted by the Central Technology Operation Center (CTOC) in Barcelona.

A service desk in Tenerife and Casablanca handles requests from athletes and staff.

Source : LeMagIT

Temporary Olympic Games ISD

🟦 CrowdStrike

I couldn't resist telling you about it: CrowdStrike, THE major computer failure, affected around 8.5 million computers worldwide. Many critical sectors were affected, including aviation, healthcare, commerce and finance.

Insured losses are estimated at between $400 million and $1.5 billion.

The outage was caused by a faulty CrowdStrike update.

Microsoft blames this partly on a 2009 agreement with the European Union, which required certain Windows APIs to be opened up to third parties.

The European Commission refuted these accusations, stressing that the blackout was not limited to the EU.

The CrowdStrike outage is a reminder of the importance of :

  • redundancy and resilience of IT systems ;
  • the need to rigorously test updates before deploying them;
  • improved collaboration and communication between software suppliers and customers;
  • strengthening system security ;
  • the balance to be struck between safety requirements and regulatory obligations.

A government investigation has been launched by the US Department of Transportation.

Potential violations of the RGPD are also identified, which can increase the total cost of the incident.

There's a debate about the "walled garden" approach (like Apple) or about opening up systems.

Sources: ITSocial, Silicon.fr, Solutions Numériques

PC Crowdstrike

Would you like to receive our white paper on identity and access management?

We have been unable to confirm your request.
Your request for a white paper has been taken into account.

Collage

  • Michael Orlitzky, frustrated by his building's faulty washing machines, decided to turn his anger into a quest for free laundry. After a series of mishaps with CSC Serviceworks' new appliances, he discovered tricks to get around the payment system. By exploring the innards of Speed Queen machines, he managed to short-circuit the payment mechanism, enabling free wash cycles.
    His experience will be shared at the DEF CON conference, where he will present his findings under the title "Laundering Money". Although his actions raise ethical questions, Orlitzky remains unperturbed, arguing that residents already pay for the water and electricity they use.
  • Capgemini, a cyberattack was orchestrated last October by one of its own engineers. This 26-year-old employee implemented a piece of malware called Knight to encrypt sensitive company data, posing as a group of Russian hackers and demanding a ransom.
    The attack left Capgemini in a delicate situation, with a locked server and potentially compromised data. What could have passed for an external threat turned out to be the work of an employee.
    After a six-month investigation by the Brigade de lutte contre la cybercriminalité (BL2C), it was established that the perpetrator of the attack was in fact a member of the team. Capgemini reacted quickly, stating that no ransom had been paid and that the data was secure.
    The engineer was dismissed and a criminal complaint was filed against him. This case raises crucial questions about internal corporate security and the need for heightened vigilance in the face of potential threats from within.

The rot is within.

☠️ Cyberattacks of the month

TotalEnergies: the French company present in 120 countries has had its data hacked in Spain. Customer data has been stolen.

The Occitanie, Bordeaux and Normandy websites : suffered a Ddos attack a few days before the 2nd round of the legislative elections. The group behind the attack NoName057(16), a Russian group.

La Filature (L'Opéra National du Rhin): the ticketing service provider for the Opéra National du Rhin has suffered a cyber attack targeting users' personal data. Bank details were spared. 400 theaters are customers of this service provider, so a risk of phishing is to be feared.

The FIA (Fédération Internationale de l'Automobile): victim of a phishing attack on two email accounts, the FIA is very concerned, as it manages the data of the Formula 1 teams.

A pharmacy in Saumur: following a security breach in the system, data was scraped and made available free of charge. Some 50,000 patient accounts were put online.

The French tax authorities: cloned in a phishing campaign.

L'Oréal Paris: 5000 lines of data have been put up for sale. This would correspond to the group's employee database.

Casino du Grand Cercle : the Grand Cercle and Poker Bowl casinos in Aix-les-Bains have been forced to close their doors following a cyber attack.

Split airport in Croatia: a cyber-attack has put its computer system out of action.

The Department of Loire-Atlantique : has suffered a cyber attack. There is little communication on this subject.

The town of Mahina : this town in French Polynesia was the victim of a cyberattack that paralyzed access to the NAS and servers.

What's new at Youzer?

Financial review.

The accounts review is IT's bête noire: it's time-consuming, restrictive and compulsory.

Doing it with Youzer is a revolution! We've got a transport customer who chose us to make it, and he's so happy with it that he's told the other divisions in the group 😎

How does it work? Youzer collects HR information, including department and manager status. Youzer then synchronizes user information with application accounts.

Workflows are used to request validation sequences from managers. To respond, managers log on to a dedicated access in Youzer.

Within a few weeks, 90% of the division's managers had responded to the request to validate their teams' access and accounts.

Meet here for a live demo :)

IT account review

Thank you for reading me this far!

Any feedback, want to discuss a project?

I'm here for that 👋.

We've sent you the newsletter and you think it's great? Sign up here 👇

Sign me up for Récap'IT

Sharing this newsletter is what keeps it alive!

Linkedin Melanie Lebrun

Every month I send you my discoveries, my analysis on IT news.
I do a lot of monitoring and I share it all!

I'm Mélanie and I'm Youzer's marketing manager.

About me? I have an unquenchable thirst for learning! I'd rather read a book 100 times than watch a movie. I'm a fan of HP 🧙🏼.
I do running and collective sport roller (don't look for it, it's dangerous).