SolarWinds Hack: Unparalleled Supply Chain Attack Results in Potential Compromise of Private and Public Sector Organizations | Alston & Bird

To embed, copy and paste the code into your website or blog:
On Sunday, December 13, 2020, SolarWinds announced that it had learned of a “highly sophisticated, manual supply chain attack” by a nation state affecting its Orion Platform, which is used by a wide variety of public and private sector organizations for IT infrastructure monitoring and management.  In this attack, adversaries were able to compromise the Orion software build system for certain versions of the software, and trojanized software updates were distributed to customers between March and June 2020. According to SolarWinds, this attack may affect as many as 18,000 customers. As a result of this attack, several key government agencies have reported that hackers were able to break into their networks, including the Department of Homeland Security (DHS), as well as the Commerce and Treasury Departments. The Cybersecurity and Infrastructure Security Agency (CISA) within DHS has advised that both public and private sector organizations using certain Orion products may be at risk of compromise.

Related Keywords

Russia , Russian , Fireeye Github , Department Of Homeland Security , Orion Improvement Program , Infrastructure Security Agency , Twitter , National Intelligence , Microsoft , Orion Platform , Homeland Security , Private Sector Organizations Encouraged , Emergency Directive , Executive Branch , Supply Chain Attack , Far Reaching , Solarwind Security Advisory , Once Solarwinds , Cozy Bear , Private Sector Cooperation , ரஷ்யா , ரஷ்ய , துறை ஆஃப் தாயகம் பாதுகாப்பு , ஒரையந் முன்னேற்றம் ப்ரோக்ர்யாம் , ட்விட்டர் , தேசிய உளவுத்துறை , மைக்ரோசாஃப்ட் , ஒரையந் நடைமேடை , தாயகம் பாதுகாப்பு , ப்ரைவேட் துறை ஆர்கநைஸேஶந்ஸ் ஊக்குவிக்கப்பட்டது , அவசரம் உத்தரவு , நிர்வாகி கிளை , விநியோகி சங்கிலி தாக்குதல் , இதுவரை ரீசிஂக் , வசதியான தாங்க , ப்ரைவேட் துறை ஒத்துழைப்பு ,