SolarWinds cyber attack: How worried should I be, and what do I do now?
Security teams across the world are on high alert as more details emerge of the widespread SolarWinds ‘Sunburst’ attack. What do defenders need to do next?
Share this item with your network:
By
Published: 15 Dec 2020 13:08
As the scale of the compromise of SolarWinds’ Orion platform – which is so far known to have struck multiple US government departmentsand cyber security firm FireEye – continues to grow, security teams at thousands of other SolarWinds customers are on high alert.
The supply chain attack, dubbed Sunburst, involved the insertion of malicious code into Orion, giving the attacker a foothold in the network that they use to obtain elevated credentials, which in turn means they can gain access to more data and largely do as they please. The initial backdoor seems to have been distributed via legitimate automatic update platforms since March 2020.